Apparatus and method for secure program upgrade

• US 7,111,292 B2
• Filed: 07/17/2002
• Issued: 09/19/2006
• Est. Priority Date: 09/10/2001
• Status: Active Grant

• Current Assignee: Texas Instruments, Inc.
• Original Assignee: Texas Instruments, Inc.
• Inventors: Dagani, Gabriel T., Robinson, Alec C., Bonnett, William B.
• Primary Examiner(s): Chaki, Kakali
• Assistant Examiner(s): Wood, William H.
• Application Number:
  US10/197,198
• Publication Number:
  US 20030051090A1
• Time in Patent Office: 1,525 Days
• Field of Search: 717168-178
• US Class Current: 717/171
• CPC Class Codes: G06F 12/1433 for a module or a part of a module
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]

Abstract

An appliance includes a memory having at least a hidden partition of memory. The hidden partition of memory operates to store at least a portion of a program capable of contributing to one or more functions of the appliance. The appliance also includes a controller operable to process at least a portion of the program stored on the hidden portion of memory. The appliance further includes an external interface operable to provide access to at least an open portion of the memory. In one particular embodiment, the hidden portion of memory is inaccessible through the external interface. After modifying the at least a portion of the program, a decrypted update file is deleted from the open portion of memory and the external interface may be reestablished.

Claims

1. A method of upgrading a program stored on an appliance, comprising:

receiving from a communication link an encrypted update file at an external interface of an appliance;

storing the encrypted update file on an open portion of a memory accessible through the external interface;

isolating the appliance from the communication link thereby preventing the appliance from communicating via the communications link;

while the appliance is isolated from the communications link, decrypting the encrypted update file;

while the appliance is isolated from the communications link, modifying at least a portion of a program stored on a hidden portion of memory based at least in part on the decrypted update file;

while the appliance is isolated from the communications link and after modifying the at least a portion of the program, deleting the decrypted update file from the open portion of memory; and

after deleting the decrypted update file, re-establishing communication between the communication link and the appliance;

wherein the hidden portion of memory is inaccessible through the external interface.

2. The method of claim 1, wherein decrypting the update file is based at least in part on a product identification associated with the appliance.

3. The method of claim 1, further comprising:

searching the open portion of the memory for the encrypted update file;

authenticating the encrypted update file based at least in part on a product identification associated with the appliance; and

loading a decryption sequence from the hidden portion of memory.

4. The method of claim 3, wherein searching the open portion of memory comprises a periodic search.

5. The method of claim 3, wherein searching the open portion of memory comprises a random search.

6. The method of claim 1, further comprising:

storing the decrypted update file on the open portion of memory; and

verifying the decrypted update file.