SoC芯片固件升级的数据安全方法设计和实现  

Design and Implementation of Data Security Method for Firmware Upgrade Based on SoC Chip

作　　者：马资道 谢演 冯乃琪 张小领 MA Zidao;XIE Yan;FENG Naiqi;ZHANG Xiaoling(Chengdu Javee Microelectronics Co.,Ltd.,Chengdu Sichuan 610041,China)

机构地区：[1]成都三零嘉微电子有限公司,四川成都610041

出　　处：《信息安全与通信保密》2025年第1期78-84,共7页Information Security and Communications Privacy

摘　　要：在嵌入式系统中,SoC芯片固件升级是保障用户应用业务更新迭代的必要措施,被广泛应用于物联网、通信、安防和电信行业等各个领域,数据安全在其中尤为重要。基于国产SoC芯片,提出了一种固件升级的数据安全保护方法,包括系统框架的设计、安全芯片固件升级、固件引导、模式切换等,重点实现了升级过程中固件文件防篡改、防泄露和身份合法性、数据完整性验证等数据保护处理机制,为SoC芯片固件升级过程中的数据通信安全提供了切实的保障和实际应用参考。The firmware upgrade based on SoC chip is a necessary measure to safeguard the update and iteration of user’s application business in embedded system,which is widely used in various fields such as Internet of Things,communication,security system and telecommunication industry,in which data security is particularly important.Based on the homemade SoC chip,this paper proposes a data security protection method of firmware upgrade,which includes the design of the system framework,the firmware upgrade of security chip,firmware boot,mode switching etc.The paper focuses on achieving the data protection processing mechanism such as anti-tampering,anti-leakage of firmware files,and the verification of identity legitimacy,data integrity during the upgrade process,which provides practical guarantee and application reference for data communication security during SoC chip firmware upgrade.

关 键 词：固件升级 身份合法 数据完整 数据保护 

分 类 号：TN918.91[电子电信—通信与信息系统]