Method and apparatus for secure computing device start up
The present invention provides methods and devices for secure computing device start up. The method includes generating a public/private key pair and signing a software image and obtaining a first time stamp and a second time stamp. The method further includes combining the signed software image, the first time stamp and the second time stamp into a bundle and deploying the bundle. During secure start up, the method includes authenticating the signed software image, the first time stamp and the second time stamp and booting the computing device if authentication passes. The computing device aborts booting the computing device if the authentication process fails.
1. A method for secure computing device start up, the method comprising:
generating a public/private key pair and signing a software image using the private key of the public/private key pair;
obtaining a first time stamp and a second time stamp;
discarding or destroying the private key of the public/private key pair prior to obtaining the second time stamp;
combining the signed software image, the first time stamp and the second time stamp into a bundle;
deploying the bundle; during secure start up, authenticating the signed software image, the first time stamp and the second time stamp; and
booting the computing device if authentication passes.
2. The method according to claim 1 , further including formatting a certificate signing request (CSR) which includes the public key of the public/private key pair and signing the CSR with the private key.
3. The method according to claim 1 , wherein the first time stamp is received from a time stamp authority.
4. The method according to claim 1 , wherein the second time stamp is received from an intermediate certification authority.
5. The method according to claim 1 , wherein authenticating the signed software image includes determining if the first time stamp is present and trusted.
6. The method according to claim 5 , wherein authenticating the signed software image includes determining if the second time stamp is present and trusted.
7. The method according to claim 6 , wherein authenticating the signed software image includes determining if the first time stamp is less than the second time stamp.
8. The method according to claim 7 , wherein authenticating the signed software image includes determining if the second time stamp minus the first time stamp is less or equal to a predetermined value.
9. The method according to claim 1 , wherein the first time stamp and the second time stamp are obtained from a same time stamp authority.
10. A method for signing a software image for use during computing device start up, the method comprising:
generating a public/private key pair and signing a software image using the private key of the public/private key pair;
obtaining a first time stamp and a second time stamp;
discarding or destroying the private key of the public/private key pair prior to obtaining the second time stamp;
combining the signed software image, the first time stamp and the second time stamp into a bundle; and
deploying the bundle for use during computing device start up.
11. The method according to claim 10 , further including formatting a certificate signing request CSR) which includes the public key of the public/private key pair and signing the CSR with the private key.
12. The method according to claim 10 , wherein the first time stamp is received from a time stamp authority.
13. The method according to claim 10 , wherein the second time stamp is received from an intermediate certification authority.
14. The method according to claim 10 , wherein the first time stamp and the second time stamp are obtained from a same time stamp authority.
15. A device for signing a software image for use during computing device start up, the device comprising:
a processor; and
machine readable memory storing machine executable instructions which when executed by the processor configure the device to:
generate a public/private key pair and sign a software image using the private key of the public/private key pair;
obtain a first time stamp and a second time stamp;
discard or destroy the private key of the public/private key pair prior to obtaining the second time stamp;
combine the signed software image, the first time stamp and the second time stamp into a bundle; and
deploy the bundle for use during computing device start up.