CPC G06F 21/572 (2013.01) [G06F 21/602 (2013.01); G06F 21/64 (2013.01)] | 20 Claims |
1. A storage device, comprising:
a memory that includes a firmware image area; and
a memory controller that
receives a first firmware image that includes a firmware signature, firmware data, a first certificate that includes a first certificate public key and a firmware fingerprint, and a second certificate that includes a second certificate public key,
verifies the first certificate using the second certificate public key,
compares a hash value of the firmware data with the firmware fingerprint when the first certificate is verified,
verifies the firmware signature using the first certificate public key when the hash value of the firmware data matches the firmware fingerprint, and
stores the first firmware image in the firmware image area when the firmware signature is verified.
|