CPC G06F 21/572 (2013.01) [G06F 9/4405 (2013.01); G06F 2221/033 (2013.01)] | 20 Claims |
1. A computing device comprising:
a first microcontroller on the computing device, the first microcontroller comprising a first immutable bootloader and first mutable firmware; and
a second microcontroller on the computing device, the second microcontroller comprising a second immutable bootloader and second mutable firmware,
the first immutable bootloader having stored therein an attestation of the first mutable firmware including:
a unique device secret burnt into hardware of the computing device, and
a measurement of the second mutable firmware from the second immutable bootloader, and
wherein the first immutable bootloader accepts the measurement of the second mutable firmware upon the measurement being in an initial message that the first microcontroller receives from the second microcontroller after the first microcontroller has restarted.
|