Secure boot has successfully protected systems from executing untrusted software (SW), but low-power controllers lack sufficient time to check every memory cell while satisfying real-time functional safety requirements. Automotive controllers need to maintain security through multiple cycles of remote, unsupervised operation and safely reach a secure state when an anomaly is detected. To accelerate the boot time, we propose Sliced Secure Boot: build fingerprints by slicing orthogonally through memory blocks, protect each cell with a reusable fingerprint using a reproducible pattern with sufficient entropy, and randomly check one fingerprint pattern during boot. We do not claim that sampling offers equivalent protection to exhaustive checks but demonstrate that careful sampling can provide a sufficient level of detection while maintaining compatibility with both startup time and functional safety requirements.
Sliced Secure Boot: An Accelerated Secure Boot Concept Compatible with Automotive Safety Controllers
Sae Intl. J Cav
Sae International Journal of Connected and Automated Vehicles ; 6 , 3 ; 365-382
2023-06-08
18 pages
Aufsatz (Konferenz)
Englisch
Accelerated Secure Boot for Real-Time Embedded Safety Systems
SAE Technical Papers | 2019
|Secure Boot Revisited: Challenges for Secure Implementations in the Automotive Domain
SAE Technical Papers | 2020
|Secure boot of Embedded Applications - A Review
IEEE | 2018
|Techniques for reprogramming the boot in automotive embedded controllers
Kraftfahrwesen | 2008
|Techniques for Reprogramming the Boot in Automotive Embedded Controllers
SAE Technical Papers | 2008
|