Digital broadcast receiver and booting method of digital broadcast receiver

• US 8,583,909 B2
• Filed: 12/06/2010
• Issued: 11/12/2013
• Est. Priority Date: 12/04/2009
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Cha, Sang Hoon, Kim, Bong Seok, Jeong, Chan Gyun, Kim, In Moon
• Primary Examiner(s): Nalven, Andrew L
• Assistant Examiner(s): MALINOWSKI, WALTER J
• Application Number:
  US12/961,145
• Publication Number:
  US 20110138164A1
• Time in Patent Office: 1,072 Days
• Field of Search: None
• US Class Current: 713/2
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/4406 Loading of operating system
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 21/4432 Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server resetting in general G06F1/14; program loading or initiating in general G06F9/445; bootstrapping in general G06F9/4401; secure boots of computer platforms G06F21/57

Abstract

A digital broadcast receiver and a booting method of the digital broadcast receiver are disclosed herein. A method of secure booting of a system in a digital broadcast receiver comprises aligning a plurality of interleaved portions to generate a digital signature, respectively, with an entire firmware image, generating a digital signature of each interleaved portion, selecting a specific interleaved portion, generating a first message digest to read a region of the selected interleaved portion in the entire firmware image and a second message digest from the digital signature of the selected interleaved portion and verifying the firmware image based on the first and second message digest and booting the system in the digital broadcast receiver.

Claims

1. A method of secure booting of a system in a digital broadcast receiver, the method comprising:

aligning a plurality of interleaved portions to generate a digital signature, respectively, with an entire firmware image;

generating a digital signature of each interleaved portion;

selecting a specific interleaved portion;

generating a first message digest to read a region of the selected interleaved portion in the entire firmware image and a second message digest from the digital signature of the selected interleaved portion; and

verifying the firmware image based on the first and second message digest and booting the system in the digital broadcast receiver,

wherein the plurality of interleaved portions are aligned to the entire firmware image except for an area which is unused by an application.

2. The method of claim 1, wherein the selected interleave portion is randomly selected according to an equal probability method every booting the system.

3. The method of claim 1, further comprises verifying a boot loader to authenticate the firmware image at a chip having a public key.

4. The method of claim 1, wherein the first message digest is generated using a hash algorithm.

5. A method of secure booting of a system in a digital broadcast receiver, the method comprising:

dividing into a header part, a body part and a tailor part in an entire firmware image based on a file system, wherein the body part is aligned a plurality of interleaved portions to generate a digital signature, respectively, and the header and tailor part as a whole area includes all interleaved portions of the body part;

generating a digital signature of each interleaved portion;

selecting a specific interleaved portion;

generating a first message digest to read any one of the header and tailor part in the entire firmware image and a second message digest from the digital signature of the selected interleaved portion; and

verifying the firmware image based on the first and second message digest and booting the system in the digital broadcast receiver,

wherein the header part includes all digital signatures which are generated to the aligned plurality of interleaved portions within the body part.

6. The method of claim 5, wherein the file system includes a squash file system.

7. The method of claim 5, wherein the header and tailor part is updated if any interleaved portion of the body part is modified.

8. The method of claim 5, wherein the selected interleave portion is randomly selected according to an equal probability method every booting the system.

9. The method of claim 5, further comprises verifying a boot loader to authenticate the firmware image at a chip having a public key.

10. The method of claim 5, wherein the first message digest is generated using a hash algorithm.

11. A digital broadcast receiver of secure booting of a system, the digital broadcast receiver comprising:

a receiver to receive a content;

a decoder to decode the content;

a controller to control to align a plurality of interleaved portions to generate a digital signature, respectively, with an entire firmware image, and generate a digital signature of each interleaved portion; and

an output unit to output the decoded content,

wherein the controller controls to select a specific interleaved portion, generate a first message digest to read one or more regions of the selected interleaved portion in the entire firmware image and a second message digest from the digital signature of the selected interleaved portion, and verify the firmware image based on the first and second message digest and boot the system in the digital broadcast receiver,

wherein the controller further controls to exclude an area which is unused by an application from the entire firmware image so as to align the plurality of interleaved portions.

12. The digital broadcast receiver of claim 11, wherein the controller controls to be randomly select the specific interleaved portion according to an equal probability method every booting the system.

13. The digital broadcast receiver of claim 11, further comprises verifying a boot loader to authenticate the firmware image at a chip having a public key.

14. The digital broadcast receiver of claim 11, wherein the first message digest is generated using a hash algorithm.

15. A digital broadcast receiver of secure booting of a system, the digital broadcast receiver comprising:

a receiver to receive a content;

a decoder to decode the content;

a controller to control to divide into a header part, a body part and a tailor part in an entire firmware image based on a file system, wherein the body part is aligned a plurality of interleaved portions to generate a digital signature, respectively, and the header and tailor part as a whole area includes all interleaved portions of the body part, and generate a digital signature of each interleaved portion; and

an output unit to output the decoded content,

wherein the controller controls to select a specific interleaved portion, generate a first message digest to read any one of the header and tailor part in the entire firmware image and a second message digest from the digital signature of the selected interleaved portion, and verify the firmware image based on the first and second message digest and boot the system in the digital broadcast receiver,

wherein the controller further controls to include the header part including all digital signatures which are generated to the aligned plurality of interleaved portions within the body part.

16. The digital broadcast receiver of claim 15, wherein the file system includes a squash file system.

17. The digital broadcast receiver of claim 15, wherein the header and tailor part is updated if any interleaved portion of the body part is modified.

18. The digital broadcast receiver of claim 15, wherein the controller randomly selects the specific interleaved portion according to an equal probability method every booting the system.

19. The digital broadcast receiver of claim 15, wherein the controller further controls to verify a boot loader to authenticate the firmware image at a chip having a public key.

20. The digital broadcast receiver of claim 15, wherein the controller controls to generate the first message digest using a hash algorithm.