US5844986A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure BIOS
Assignee: Intel Corp
•
Filing: 1996-09-30
•
Granted: 1998-12-01
•
Expires: 2016-09-30
Abstract
Abstract A subsystem prevents unauthorized modification of BIOS program code embedded in modifiable non-volatile memory devices such as flash memory. A cryptographic coprocessor containing the BIOS memory device performs authentication and validation on the BIOS upgrade based on a public/private key protocol. The authentication is performed by verifying the digital signature embedded in the BIOS upgrade.
Inventors
- 👤 Derek L. Davis
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 08:51
CPC Classifications
G; G06; G06F; G06F8/00; G06F21/00; G06F21/70; G06F21/71; G06F21/50; G06F21/57; G06F21/572; G06F21/575; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; G06F2211/00; G06F2211/007; G06F2211/008; G06F2211/1097
Claims Analysis
Total Claims: 49
Claim 1
Independent Claim
47 words
A system for securely updating an executable code, comprising: first storage means for storing a code update; second storage means for storing said executable code; and first processing means for authenticating and validating said code update, said first processing means being coupled to said second storage means.
Claim 2
Independent Claim
47 words
A system for securely updating an executable code, comprising: first storage means for storing a code update; second storage means for storing said executable code; and first processing means for authenticating and validating said code update, said first processing means being coupled to said second storage means.
Claim 3
Dependent Claim
17 words
The system of claim 1 wherein the executable code includes a Basic Input and Output System (BIOS).
Claim 4
Dependent Claim
29 words
The system of claim 1 wherein the first storage means is one of a mass storage device and a file capable of being sent electronically in a computer network.
Claim 5
Dependent Claim
16 words
The system of claim 1 wherein the second storage means includes a modifiable non-volatile memory device.
Claim 6
Dependent Claim
14 words
The system of claim 1 wherein the first processing means includes a cryptographic processor.
Claim 7
Dependent Claim
30 words
The system of claim 1 wherein the first processing means uses at least one digital certificate to authenticate the code update and a digital signature to validate the code update.
Claim 8
Dependent Claim
16 words
The system of claim 1 wherein said executable code is encrypted to produce an encrypted code.
Claim 9
Dependent Claim
24 words
The system of claim 1 further comprising: second processing means for communicating with said first processing means in order to execute said executable code.
Claim 10
Dependent Claim
16 words
The system of claim 7 wherein said encrypted code is decrypted to produce a decrypted code.
Claim 11
Independent Claim
61 words
A system for securely updating an executable code, comprising: a first storage element for containing a code update; a second storage element that contains said executable code; and a security processor coupled to said second storage element, said security processor for authenticating said code update based on at least one certificate and validating said code update based on a digital signature.
Claim 12
Independent Claim
61 words
A system for securely updating an executable code, comprising: a first storage element for containing a code update; a second storage element that contains said executable code; and a security processor coupled to said second storage element, said security processor for authenticating said code update based on at least one certificate and validating said code update based on a digital signature.
Claim 13
Dependent Claim
17 words
The system of claim 10 wherein the executable code includes a Basic Input and Output System (BIOS).
Claim 14
Dependent Claim
15 words
The system of claim 10 wherein the digital signature is part of the code update.
Claim 15
Dependent Claim
16 words
The system of claim 10 wherein the second storage element includes a modifiable non-volatile memory device.
Claim 16
Dependent Claim
15 words
The system of claim 10 wherein the security processor is mounted on a removable card.
Claim 17
Dependent Claim
25 words
The system of claim 11 wherein said at least one certificate includes an encrypted version of a public key of a vendor of the BIOS.
Claim 18
Dependent Claim
15 words
The system of claim 10 wherein said executable code is contained in an encrypted format.
Claim 19
Dependent Claim
23 words
The system of claim 10 further comprising: a host processor for communicating with said security processor in order to execute said executable code.
Claim 20
Dependent Claim
13 words
The system of claim 16 wherein said encrypted code is decrypted before execution.
Claim 21
Independent Claim
83 words
A method for securely updating an executable code, the method comprising: providing a first storage element for storing a code update; providing a second storage element for storing said executable code; configuring said first storage element to contain at least one certificate; providing a security processor for accessing said second storage element; authenticating said code update based on said at least one digital certificate by said security processor; and updating said executable code with said code update if said code update is authenticated.
Claim 22
Independent Claim
83 words
A method for securely updating an executable code, the method comprising: providing a first storage element for storing a code update; providing a second storage element for storing said executable code; configuring said first storage element to contain at least one certificate; providing a security processor for accessing said second storage element; authenticating said code update based on said at least one digital certificate by said security processor; and updating said executable code with said code update if said code update is authenticated.
Claim 23
Dependent Claim
21 words
The method of claim 19, wherein before said updating step, the method further comprises a step of validating said code update.
Claim 24
Dependent Claim
17 words
The method of claim 19 wherein the executable code includes a Basic Input and Output System (BIOS).
Claim 25
Dependent Claim
20 words
The method of claim 19, wherein said executable code provided in the second storage element is in an encrypted format.
Claim 26
Dependent Claim
24 words
The method of claim 19 further comprising: providing a host processor for communicating with said security processor in order to execute said executable code.
Claim 27
Independent Claim
45 words
A system comprising: a first storage element for containing a code update; a second storage element that contains an executable code; and a security processor coupled to said second storage element, the security processor for authenticating the code update based on at least one certificate.
Claim 28
Independent Claim
45 words
A system comprising: a first storage element for containing a code update; a second storage element that contains an executable code; and a security processor coupled to said second storage element, the security processor for authenticating the code update based on at least one certificate.
Claim 29
Dependent Claim
17 words
The system of claim 24 wherein the executable code includes a Basic Input and Output System (BIOS).
Claim 30
Dependent Claim
25 words
The system of claim 24 wherein the at least one certificate includes an encrypted version of a public key of a vendor of the BIOS.
Claim 31
Dependent Claim
16 words
The system of claim 24 wherein the second storage element includes a modifiable non-volatile memory device.
Claim 32
Dependent Claim
24 words
The system of claim 24 wherein the security processor further validating the code update through a digital signature being part of the code update.
Claim 33
Dependent Claim
28 words
The system of claim 28 wherein the security processor further loading the code update into the second memory element after the code update has been authenticated and validated.
Claim 34
Dependent Claim
15 words
The system of claim 24 wherein the security processor is mounted on a removable card.
Claim 35
Dependent Claim
21 words
The system of claim 24 wherein the executable code is in an encrypted format when contained in the second storage element.
Claim 36
Dependent Claim
23 words
The system of claim 24 further comprising: a host processor for communicating with said security processor in order to execute the executable code.
Claim 37
Independent Claim
39 words
A system comprising: a first storage element for containing a code update; a second storage element that contains an executable code; and a security processor coupled to the second storage element, the security processor for validating said code update.
Claim 38
Independent Claim
39 words
A system comprising: a first storage element for containing a code update; a second storage element that contains an executable code; and a security processor coupled to the second storage element, the security processor for validating said code update.
Claim 39
Dependent Claim
23 words
The system of claim 33 wherein the security processor substituting the code update for the executable code when the code update is validate.
Claim 40
Dependent Claim
17 words
The system of claim 33 wherein the executable code includes a Basic Input and Output System (BIOS).
Claim 41
Dependent Claim
15 words
The system of claim 33 wherein the digital signature is part of the code date.
Claim 42
Dependent Claim
16 words
The system of claim 33 wherein the second storage element includes a modifiable non-volatile memory device.
Claim 43
Dependent Claim
29 words
The system of claim 33 wherein the security processor further authenticating the code update with at least one certificate including a public key of a vendor of the BIOS.
Claim 44
Independent Claim
51 words
A system comprising: a first storage element that contains information; a second storage element for containing update information; and a security processor coupled to the first storage element, the security processor validating the update information to determine whether the update information is to be subsequently loaded into the first storage element.
Claim 45
Independent Claim
51 words
A system comprising: a first storage element that contains information; a second storage element for containing update information; and a security processor coupled to the first storage element, the security processor validating the update information to determine whether the update information is to be subsequently loaded into the first storage element.
Claim 46
Dependent Claim
25 words
The system of claim 39, wherein the security processor further authenticating the update information to determine that the update information originated from a predetermined source.
Claim 47
Dependent Claim
12 words
The system of claim 40 wherein the information includes an executable code.
Claim 48
Dependent Claim
16 words
The system of claim 41, wherein the executable code includes Basic Input and Output System (BIOS).
Claim 49
Dependent Claim
14 words
The system of claim 42, wherein the predetermined source includes a selected BIOS vendor.
References Cited (Backward Citations)
US5144659A
Cited
US5289540A
Cited
US5022077A
Cited
US5421006A
Cited
US5359659A
Cited
US5465299A
Cited
US5479509A
Cited
US5444850A
Cited
US5386469A
Cited
US5450489A
Cited
US5377264A
Cited
US5584023A
Cited
US5666411A
Cited
US5568552A
Cited
US5644636A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-11-30 | 2002-06-01 | 2002-12-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-11-30 | 2006-06-01 | 2006-12-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-11-30 | 2010-06-01 | 2010-12-01 | $7700.00 | Window Closed / Lapsed |