US 11,874,928 B2
Security device, electronic device, secure boot management system, method for generating boot image, and method for executing boot chain
Ki Seok Bae, Hwaseong-si (KR); Jong Hoon Shin, Hwaseong-si (KR); Ki Tak Kim, Siheung-si (KR); Hye Soo Lee, Yongin-si (KR); Jin Su Hyun, Seoul (KR); and Hyo Sun Hwang, Bucheon-si (KR)
Assigned to SAMSUNG ELECTRONICS CO., LTD., Suwon-si (KR)
Filed by SAMSUNG ELECTRONICS CO., LTD., Suwon-si (KR)
Filed on Aug. 24, 2020, as Appl. No. 17/000,748.
Claims priority of application No. 10-2020-0011001 (KR), filed on Jan. 30, 2020.
Prior Publication US 2021/0240833 A1, Aug. 5, 2021
Int. Cl. G06F 21/57 (2013.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01)
CPC G06F 21/575 (2013.01) [G06F 21/572 (2013.01); H04L 9/0861 (2013.01); H04L 9/0897 (2013.01); H04L 9/3242 (2013.01); H04L 9/3247 (2013.01); H04L 9/3268 (2013.01); G06F 2221/033 (2013.01)] 8 Claims
OG exemplary drawing
 
1. An electronic device comprising:
at least one memory configured to:
at a first time point, store a first boot image including a first protected boot key and a protected execution image, and
at a second time point following the first time point, store a second boot image including a second protected boot key different from the first protected boot key; and
at least one processor configured to:
store a same root key at the first time point and the second time point,
at the first time point, extract a first boot key using the stored same root key and the first protected boot key and perform a boot operation using the extracted first boot key, and
at the second time point, extract a second boot key using the stored same root key and the second protected boot key and perform the boot operation using the extracted second boot key;
generate a derived key according to a predetermined key protection method using the stored same root key and the first protected boot key and the second protected boot key,
perform verification according to the predetermined key protection method using the generated derived key to extract a boot key from the protected first boot key and the protected second boot key, and
perform the boot operation using the extracted boot key.