Identification of embedded system devices
An embedded system device comprises a processor operatively coupled to a first memory space, a second memory space, and a plurality of user controls. The processor is configured to execute only executable code residing within the first memory space, and the executable code includes authentication routine configured to generate a device identifier based at least upon non-user-configurable parameters of the embedded system device. The second memory space includes user configurable options for use by the processor when executing the executable code. The user controls are adapted to configure the user configurable options within the second memory space, wherein the user controls cannot configure the first memory space.
1. A system for authenticating an embedded system device, the system comprising:
an authentication server configured so that, in response to a communication link being available between the authentication server and the embedded system device, the authentication server:
receives from the embedded system device, via the communication link, an authentication request including an assigned device identifier and a generated device identifier, both identifying the embedded system device, wherein the generated device identifier is based upon non-user-configurable parameters of the embedded system device, wherein the non-user-configurable parameters comprise information derived from executable code stored within a first memory of the embedded system device that stores all executable code of the embedded system device and that is separate from a second memory of the embedded system device that stores all user-configurable data of the device;
accesses a database including records of known assigned device identifiers and known generated device identifiers; and
authenticates the embedded system device based upon a comparison between the authentication request and the records within the database.
2. The system of claim 1 , wherein the authentication server is further configured so that, in response to the communication link being available between the authentication server and the embedded system device, the authentication server establishes a secure communication link with the embedded system device following authentication of the embedded system device.
3. The system of claim 1 , wherein the embedded system device is configured to send the authentication request upon the communication link being established.
4. The system of claim 1 , wherein the non-user-configurable parameters comprise information about hardware within the embedded system device.
5. The system of claim 1 , wherein the non-user-configurable parameters comprise information derived from hardware within the embedded system device.