Secure Method and System for Remote Field Upgrade of Power Device Firmware

• US 20130339734A1
• Filed: 12/21/2012
• Published: 12/19/2013
• Est. Priority Date: 08/12/2011
• Status: Abandoned Application

• Current Assignee: Power-One Incorporated (ABB Limited)
• Original Assignee: Power-One Incorporated (ABB Limited)
• Inventors: Vernia, Filippo, Tazzari, Davide, Checcucci, Alessandro
• Application Number:
  US13/724,232
• Publication Number:
  US 20130339734A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

To protect software to be transferred to programmable electronic devices, a management system for programmable electronic devices includes a plurality of electronic devices, each identified by at least one unique identification parameter and containing at least one encryption key. The system also includes at least one protected site in which a protected database resides, and in which the unique identification parameter the encryption key are stored for each electronic device. A server is programmed to receive a request for transmission of software from a device and to generate an encrypted version of said software, using the encryption key associated in the database with the unique identification parameter (ID) of the device (57) that has requested the transmission of said software.

Claims

1. A system for managing programmable electronic devices, comprising:

a plurality of electronic devices, each identified by at least one unique identification parameter and containing at least one encryption key;

at least one protected site in which a protected database resides, in which for each of said electronic devices the unique identification parameter and the encryption key are stored; and

a server programmed to receive from one of said devices a request for transmission of software and to generate an encrypted version of said software, using the encryption key associated in said database with the unique identification parameter of the device that has requested the transmission of said software.

2. The system of claim 1, wherein said server is further programmed to store information concerning the transmission of software to said devices, and to subordinate the transmission of software requested by one of said devices to at least one condition defined by said information.

3. The system of claim 2, wherein said server is further programmed to prevent a second transmission of software to a device to which said software has already been sent once.

4. The system of claim 1, further comprising:

at least one production site different from said protected site;

a programmer being provided in said production site, wherein the programmer is functional to receive software from said server and program said devices with said software.

5. The system of claim 4 further comprising a program generator configured in said production site.

6. The system of claim 1 wherein a program generator is provided in said protected site, the program generator effective to generate software associated with a unique identification parameter of one of said devices and with an encryption key corresponding to said unique identification parameter).

7. The system of claim 1 wherein said server is further programmed to

receive a request for software by one of said devices, said request comprising at least the unique identification parameter of the requesting device,

verify whether the unique identification parameter of the device that requested said software is contained in said protected database,

if the unique identification parameter of the requesting device is contained in the protected database, verify at least one update enabling condition by the requesting device;

if said condition is met, send to said requesting device a version of the software requested encrypted with the encryption key associated with the unique identification parameter of the requesting device.

8. The system of claim 1 wherein said server is further programmed to supply a bootloader to each of said devices.

9. The system of claim 8, wherein said server is further programmed to supply to each of said devices a bootloader associated with an encryption key.

10. The system of claim 9, wherein said server is further programmed to supply to each of said devices a bootloader associated with a unique identification parameter of said devices.

11. The system of claim 10 wherein said server is further programmed to supply to each of said devices said bootloader in encrypted version.

14. The method of claim 3, further comprising the steps of:

verifying whether for the unique identification parameter of the requesting device, the software to be installed has already been transferred;

if not, transferring the software to said device (57); and

if so, denying transfer of the software to said device and/or generating a signal.

12. A method for installing software on a plurality of electronic devices comprising the steps of:

associating with each electronic device at least one unique identification parameter and at least one encryption key;

storing, in a protected database, for each device the respective unique identification parameter and the respective encryption key;

encrypting software to be installed on one of said devices with the encryption key of said device;

transferring said encrypted software to said device; and

installing the software in said device.

13. The method of claim 12, further comprising the steps of:

generating a request for software by one of said devices, said request comprising at least the unique identification parameter of the requesting device;

verifying whether the unique identification parameter of the device that has requested said software is contained in said protected database;

if the unique identification parameter of the requesting device is contained in the protected database, verifying if said requesting device meets at least one update enable condition;

if the condition is met, sending to said requesting device a version of the software requested, encrypted with the encryption key associated with the unique identification parameter of the requesting device (ID); and

if the condition is not met, not sending the software requested to the requesting device.