System method for vehicle bootloader image authentication using random number generator with cryptographic hash values
A bootloader authentication system with a multimedia device to mount within a vehicle, a memory device, and a processor. The memory device stores data indicative of a public key associated with the vehicle and a signed hash bootloader image indicative of a signature of a private key. The processor is in communication with the memory device and is programmed to: generate a signature verification block based on a combination of a random number and the signed hash bootloader image; compare the signature verification block to the public key to verify the signature of the private key; authenticate a bootloader in response to verifying the signature of the private key; and activate the multimedia device in response to bootloader authentication
1. A bootloader authentication system comprising:
a multimedia device to mount within a vehicle;
a memory device to store data indicative of a public key associated with the vehicle, and a signed hash bootloader image indicative of a signature of a private key, wherein the signed hash bootloader image comprises a plurality of bootloader image blocks and a plurality of cryptographic hash values;
a processor in communication with the memory device, programmed to:
determine a random number using a random number generator;
determine a signature verification block from the plurality of bootloader image blocks using a random number;
compare the signature verification block to the public key to verify the signature of the private key;
authenticate a bootloader in response to verifying the signature of the private key; and
activate the multimedia device in response to bootloader authentication.
2. The bootloader authentication system of claim 1 , wherein the signature verification block comprises a single signature verification block.
3. The bootloader authentication system of claim 1 , wherein each bootloader image block is appended to a corresponding cryptographic hash value.
4. The bootloader authentication system of claim 3 , wherein the plurality of cryptographic hash values is based on the plurality of bootloader image blocks and signed values associated with the signature of the private key.
5. The bootloader authentication system of claim 1 , wherein the multimedia device comprises at least one of a loudspeaker, a camera, a sensor, and a display.
6. The bootloader authentication system of claim 1 , wherein the public key is paired with the private key.
7. The bootloader authentication system of claim 1 , wherein the memory device comprises non-volatile memory and flash memory, and wherein the non-volatile memory stores the data indicative of the public key, and wherein the flash memory stores the data indicative of the signed hash bootloader image indicative of the signature of the private key.
8. The bootloader authentication system of claim 1 , wherein the processor is further programmed to generate the signature verification block in response to a vehicle start.
9. A bootloader authentication system comprising:
a multimedia device to mount within a vehicle;
a controller to control the multimedia device, the controller configured to:
generate a signature verification block based on a combination of a random number and a signed hash bootloader image indicative of a signature of a private key, wherein the signed hash bootloader image comprises a plurality of bootloader image blocks, and the signature verification block is one of the plurality of bootloader image blocks;
compare the signature verification block to a public key associated with the vehicle to verify the signature of the private key;
authenticate a bootloader in response to verifying the signature of the private key; and
activate the multimedia device in response to bootloader authentication.
10. The bootloader authentication system of claim 9 , wherein the signature verification block comprises a single signature verification block, and wherein the controller is further configured to generate the single signature verification block based on a combination of the random number and a single signed hash bootloader image block.
11. The bootloader authentication system of claim 9 , wherein the signed hash bootloader image further comprises a plurality of cryptographic hash values, wherein each bootloader image block is appended to a corresponding cryptographic hash value.
12. The bootloader authentication system of claim 11 , wherein the plurality of cryptographic hash values is based on the plurality of bootloader image blocks and signed values associated with the signature of the private key.
13. The bootloader authentication system of claim 9 , wherein the public key is paired with the private key.
14. The bootloader authentication system of claim 9 , wherein the multimedia device comprises at least one of a loudspeaker, a camera, a sensor, and a display.
15. The bootloader authentication system of claim 9 , wherein the controller comprises a processor and a memory device, wherein the memory device comprises:
non-volatile memory to store data indicative of the public key; and
flash memory to store data indicative of the signed hash bootloader image indicative of the signature of the private key.
16. A method for authenticating an automotive embedded system bootloader comprising:
receiving an input indicative of a vehicle start;
generating a random number, in response to the input;
retrieving, from memory, data indicative of a public key associated with a vehicle, and a signed hash bootloader image indicative of a signature of a private key associated with a multimedia device adapted to mount within the vehicle;
generating a signature verification block based on a combination of the random number and the signed hash bootloader image;
comparing the signature verification block to the public key to verify the signature of the private key;
authenticating a bootloader in response to verifying the signature of the private key; and
activating the multimedia device in response to bootloader authentication.
17. The method of claim 16 wherein the signature verification block comprises a single signature verification block, the method further comprising generating the single signature verification block based on a combination of the random number and a single signed hash bootloader image block.
18. The method of claim 16 wherein the signed hash bootloader image comprises a plurality of bootloader image blocks and a plurality of cryptographic hash values, the method further comprising appending each bootloader image block to a corresponding cryptographic hash value.
19. The method of claim 16 further comprising generating the random number from a physical process based on statistically random noise signals.
20. The method of claim 16 further comprising pairing the public key with the private key.