OVER-THE-AIR UPDATE VALIDATION
The present disclosure includes apparatuses, methods, and systems for over-the-air update validation. An embodiment includes a memory, and circuitry associated with the memory, where the circuitry is configured to monitor the memory for receipt of over-the-air updates, store a received update in a secure array of the memory, receive a hash of a signature associated with the received update and store the hash of the received signature in a register of the memory, receive an indication that the received update is authentic, wherein the indication includes a hash of an expected signature, and take an action in response to the indication that the received update is authentic.
1 . An apparatus, comprising:
a memory; and
circuitry associated with the memory, the circuitry configured to:
monitor the memory for receipt of over-the-air updates;
store a received update in a secure array of the memory;
receive a hash of a signature associated with the received update and store the hash of the received signature in a register of the memory;
receive an indication that the received update is authentic, wherein the indication includes a hash of an expected signature; and
take an action in response to the indication that the received update is authentic.
2 . The apparatus of claim 1 , wherein the circuitry is configured to generate the hash of the expected signature in response to a signal received by the memory from a host to execute the received update.
3 . The apparatus of claim 1 , wherein the update includes instructions to configure an internet of things (IoT) device monitored by a host associated with the memory.
4 . The apparatus of claim 1 , wherein the circuitry is further configured to:
generate, in response to receiving a signal, the hash of the expected signature; and
compare, in response to receiving the signal, the hash of the expected signature to the hash of the received signature as part of an operation to check the validity of the received update.
5 . The apparatus of claim 4 , wherein the hash of the received signature and the hash of the expected signature are different when the update is determined to be invalid.
6 . The apparatus of claim 4 , wherein the hash of the received signature and the hash of the expected signature are the same when the update is authentic.
7 . The apparatus of claim 1 , wherein the memory is associated with a host, and the host manages an internet of things (IoT) device.
8 . The apparatus of claim 7 wherein the received update is transmitted over-the-air to the memory from the host.
9 . The apparatus of claim 7 , wherein the memory provides the received update to the IoT device when the received update is determined, by the memory, to be valid.
10 . The apparatus of claim 1 , wherein the action is to copy the received update from the secure array to a non-secure potion of the memory where the received update is accessible to a device monitored by a host.
11 . The apparatus of claim 1 , wherein the action is to copy the received update from the secure array to a different portion of the secure array of the memory where the received update is accessible to a device monitored by a host.
12 . An apparatus, comprising:
a memory associated with a host; and
circuitry associated with the memory, the circuitry configured to:
receive an update associated with the host and store the update in a secure array of the memory;
receive a signature associated with the update, wherein the received signature includes a freshness value indicating that the update is associated with the host;
determine whether the update is valid based on a comparison between the received signature and an expected signature, wherein a difference between the received signature and the expected signature indicates that the update is invalid; and
copy the update from the secure array to a non-secure portion of the memory in response to the determination that the received signature and the expected signature are the same.
13 . The apparatus of claim 12 , wherein the memory validates the update for a device managed by the host.
14 . The apparatus of claim 13 , wherein the device accesses the validated update when the update is copied from the secure array to the non-secure portion of the memory.
15 . The apparatus of claim 12 , wherein the update is received over-the-air from the host in response to the host transmitting the update for multiple devices managed by the host.
16 . The apparatus of claim 12 , wherein the circuitry is further configured to provide the freshness value to the host when the host generates the received signature associated with the update.
17 . A system, comprising:
a host;
a memory device associated with the host; and
circuitry configured to:
receive a signature and an update corresponding to the received signature from the host, wherein the update is for a device monitored by the host;
store the update corresponding to the device monitored by the host in a secure array of the memory device, and store the received signature in a signature register of the memory device;
generate an expected signature to verify the update, wherein the update is verified when the expected signature and the received signature are the same; and
copy the update to a non-secure portion of the memory device when the update is verified.
18 . The system of claim 17 , wherein the circuitry is further configured to:
receive a command from the host to read the signature; and
generate the expected signature, wherein the expected signature is a hash of the secure array that is storing the update associated with the received signature.
19 . The system of claim 17 , wherein the device monitored by the host is an internet of things (IoT) sensor.
20 . A method, comprising:
receiving, by a memory device, a signature and an update corresponding to the signature, from a host, wherein the update is for an internet of things (IoT) device monitored by the host;
storing, by the memory device, the update in a secure array of the memory device and the received signature in a register of the memory device;
comparing, by the memory device, an expected signature to the received signature, wherein the expected signature is generated to verify the update; and
copying, by the memory device, the update from the secure array of the memory device to a non-secure portion of the memory device in response to the update being verified, wherein the update is available to the IoT device when the update is copied to the non-secure portion of the memory device.
21 . The method of claim 20 , wherein receiving the signature from the host further comprises the memory device transmitting, in response to a signal received from the host, a freshness value to the host.
22 . The method of claim 20 , wherein comparing the expected signature to the received signature further comprises generating a hash of the expected signature in response to receiving a command from the host to execute the received update.
23 . The method of claim 20 , wherein copying the update from the secure array of the memory device to the non-secure portion of the memory device further comprises transmitting the update to the IoT device for execution.
24 . The method of claim 20 , wherein the host is a manufacturer of the IoT device.