Method for the secure remote flashing of a BIOS memory

Claim 2

A computer system, comprising: a writable nonvolatile memory; at least one microprocessor operatively connected to execute at least one instruction sequence from said nonvolatile memory at reboot, and to control writing thereto; validation data in said nonvolatile memory which can authenticate digital signatures from first and second originators; wherein said microprocessor enables writing into said nonvolatile memory only after successful authentication, using said validation data, of first and second digital signature codes which are attached to the data to be written, by a digital signature verification process; wherein said first digital signature code corresponds to a vendor signature; wherein said second digital signature code corresponds to an administrator signature; whereby the administrator can update a system program from any computer in the system by providing said second digital signature code.

Claim 3

The system of claim 1, wherein said first digital signature code is checked for validation of said data to be written, and said second digital signature code is checked for validation of said first digital signature in combination with said data to be written.

Claim 4

The system of claim 1, wherein said digital signature codes are checked using a public-key/private-key digital signature relationship, and said nonvolatile memory contains public keys corresponding to said first and second originators.

Claim 5

The system of claim 1, wherein said nonvolatile memory is a flash memory which comprises separately programmable first and second halves, and a toggle bit to select between said halves.

Claim 6

The system of claim 1, wherein said system is a network hub, and an initialization program stored in said nonvolatile memory is executed whenever said system undergoes a system reset.

Claim 7

The system of claim 1, wherein said system is a network route, and an initialization program stored in said nonvolatile memory is executed whenever said system undergoes a system reset.

Claim 8

A computer network system, comprising: a network hub; a plurality of computer systems, each system connected to said network hub and having a user input device, a microprocessor operatively connected to detect inputs from said input device, a memory which is connected to be read/write accessible by said microprocessor, a programmable non-volatile memory, said programmable non-volatile memory containing first and second validation keys as well as boot routines, a power supply connected to provide power to said microprocessor, said memory, and said display; wherein said programmable non-volatile memory of any of said computer systems can be remotely programmed, but only when two digital signatures on the data to be programmed are both validated by a digital signature verification process which uses said first and said second validation keys; wherein said first digital signature corresponds to a vendor signature wherein said second digital signature corresponds to a system administrator signature; whereby the administrator can update a system program from any computer in the system by providing said second digital signature.

Claim 9

A computer network system, comprising: a network hub; a plurality of computer systems, each system connected to said network hub and having a user input device, a microprocessor operatively connected to detect inputs from said input device, a memory which is connected to be read/write accessible by said microprocessor, a programmable non-volatile memory, said programmable non-volatile memory containing first and second validation keys as well as boot routines, a power supply connected to provide power to said microprocessor, said memory, and said display; wherein said programmable non-volatile memory of any of said computer systems can be remotely programmed, but only when two digital signatures on the data to be programmed are both validated by a digital signature verification process which uses said first and said second validation keys; wherein said first digital signature corresponds to a vendor signature wherein said second digital signature corresponds to a system administrator signature; whereby the administrator can update a system program from any computer in the system by providing said second digital signature.

Claim 10

The system of claim 7, wherein said programmable non-volatile memory is a flash memory.

Claim 11

The system of claim 7, wherein said programmable non-volatile memory is a flash memory comprising separately programmable first and second halves.

Claim 12

The system of claim 7, wherein said programmable non-volatile memory comprises separately programmable first and second halves.

Claim 13

The system of claim 7, wherein an initialization program stored in said programmable non-volatile memory is executed whenever said network hub is powered on.

Claim 14

The system of claim 7, wherein said programmable non-volatile memory of any of said computer systems can only be remotely programmed if said first digital signature validates said data to be written, and said second digital signature validates said first digital signature in combination with said data to be written.

Claim 15

A computer network system, comprising: a network hub having a programmable non-volatile memory; a plurality of computer systems, each system connected to said network hub and having a user input device, a microprocessor operatively connected to detect inputs from said input device, a memory which is connected to be read/write accessible by said microprocessor, a video controller connected to said microprocessor, a display operatively connected to display data generated by said video controller at a first refresh rate, and a power supply connected to provide power to said microprocessor, said memory, and said display; wherein said programmable non-volatile memory of said network hub can only be programmed when codes corresponding to first and second digital signatures are received by said hub and verified against public keys stored by said hub; wherein said first digital signature corresponds to a vendor code; wherein said second digital signature corresponds to an authorization code; whereby the administrator can update a system program from any computer in the system by providing said second digital signature.

Claim 16

A computer network system, comprising: a network hub having a programmable non-volatile memory; a plurality of computer systems, each system connected to said network hub and having a user input device, a microprocessor operatively connected to detect inputs from said input device, a memory which is connected to be read/write accessible by said microprocessor, a video controller connected to said microprocessor, a display operatively connected to display data generated by said video controller at a first refresh rate, and a power supply connected to provide power to said microprocessor, said memory, and said display; wherein said programmable non-volatile memory of said network hub can only be programmed when codes corresponding to first and second digital signatures are received by said hub and verified against public keys stored by said hub; wherein said first digital signature corresponds to a vendor code; wherein said second digital signature corresponds to an authorization code; whereby the administrator can update a system program from any computer in the system by providing said second digital signature.

Claim 17

The system of claim 13, wherein said programmable non-volatile memory is a flash memory.

Claim 18

The system of claim 13, wherein said programmable non-volatile memory comprises separately programmable first and second halves.

Claim 19

The system of claim 13, wherein an initialization program stored in said programmable non-volatile memory is executed whenever said network hub is powered on.