Secure booting method and mobile terminal for the same

• US 20070083760A1
• Filed: 08/31/2006
• Published: 04/12/2007
• Est. Priority Date: 10/11/2005
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Cho, Sung-Goo, Jeong, Gi-Bong
• Granted Patent: US 7,885,647 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading

Abstract

A secure booting method for a mobile terminal comprising: checking configuration information stored in a non-volatile memory embedded in the mobile terminal to determine whether the configuration information is effective when the mobile terminal is booted, connecting the mobile terminal with a host to copy a downloader and a downloader certificate from the host when it is determined that the configuration information is not effective, performing authentication of the copied downloader using the downloader certificate and an authentication key stored in the mobile terminal, and downloading a program stored in the host to the non-volatile memory using the downloader when the downloader is authenticated.

Claims

1. A secure booting method for a mobile terminal, the secure booting method comprising:

checking configuration information stored in a non-volatile memory in the mobile terminal to determine whether the configuration information is effective when the mobile terminal is booted;

connecting the mobile terminal with a host to copy a downloader and a downloader certificate from the host when it is determined that the configuration information is not effective;

performing authentication of the copied downloader using the downloader certificate and an authentication key stored in the mobile terminal; and

downloading a program stored in the host to the non-volatile memory using the downloader when the downloader is authenticated.

2. The secure booting method of claim 1, wherein the downloader certificate comprises a first customer public key provided by a manufacturer of the mobile terminal, a first signature for the first customer public key, and a signature for the downloader.

3. The secure booting method of claim 2, wherein the authentication of the copied downloader comprises:

performing authentication of the first customer public key using the authentication key and the first signature for the first customer public key; and

performing authentication of the downloader using the first customer public key and the signature for the downloader.

4. The secure booting method of claim 1, wherein the program comprises configuration information about the non-volatile memory and a certificate.

5. The secure booting method of claim 4, further comprising:

determining whether the mobile terminal has been connected with the host when the mobile terminal is rebooted; and

performing authentication of the certificate using the authentication key when it is determined that the mobile terminal has not been connected with the host.

6. The secure booting method of claim 5, wherein the program further comprises an application code, and the certificate comprises information for authentication of the application code, a second customer public key provided by a manufacturer of the mobile terminal, information for preventing change of identification information for identifying the mobile terminal, information indicating a storage position of the identification information, a second signature for the second customer public key, and a signature for the certificate.

7. The secure booting method of claim 6, wherein the authentication of the certificate comprises:

performing authentication of the second customer public key using the authentication key and the second signature for the second customer public key;

performing authentication of the certificate using the signature for the certificate;

performing authentication of the identification information using the information for preventing change of the identification information and the information indicating the storage position of the identification information; and

performing authentication of the application code using the information for the authentication of the application code.

8. The secure booting method of claim 5, further comprising repeating the authentication of the copied downloader and the downloading of the program when it is determined that the mobile terminal has been connected with the host.

9. The secure booting method of claim 1, further comprising:

determining whether the mobile terminal has been connected with the host when it is determined that the configuration information is effective; and

performing authentication of a certificate in the program stored in the non-volatile memory using the authentication key when it is determined that the mobile terminal has not been connected with the host.

10. The secure booting method of claim 9, wherein the program further comprises an application code, and the certificate comprises information for authentication of the application code, a customer public key provided by a manufacturer of the mobile terminal, information for preventing change of identification information for identifying the mobile terminal, information indicating a storage position of the identification information, a signature for the customer public key, and a signature for the certificate.

11. The secure booting method of claim 10, wherein the performing of the authentication comprises:

performing authentication of the customer public key using the authentication key and the signature for the customer public key;

performing authentication of the certificate using the signature for the certificate;

performing authentication of the identification information using the information for preventing change of the identification information and the information indicating the storage position of the identification information; and

performing authentication of the application code using the information for the authentication of the application code.

12. The secure booting method of claim 9, further comprising repeating the authentication of the copied downloader and the downloading of the program when it is determined that the mobile terminal has been connected with the host.

13. A computer readable recording medium storing a program for performing the secure booting method of claim 1.

14. A mobile terminal comprising:

a memory storing a first program;

a non-volatile memory; and

a processor to execute the first program,

wherein, according to the program, the processor checks configuration information stored in the non-volatile memory to determine whether the configuration information is effective when the mobile terminal is booted;

connects the mobile terminal with a host and copies a downloader and a downloader certificate from the host when it is determined that the configuration information is not effective;

performs authentication of the copied downloader using the downloader certificate and an authentication key stored in the mobile terminal; and

downloads a second program stored in the host to the non-volatile memory using the downloader when the downloader is authenticated.