公开(公告)号：US20150033030A1

公开(公告)日：2015-01-29

申请号：US14452397

申请日：2014-08-05

Applicant: Apple Inc.

Inventor： Dallas Blake de ATLEY ,  Joshua de CESARE ,  Michael SMITH ,  Matthew REDA ,  Shantonu SEN ,  John Andrew WRIGHT

IPC: G06F21/57 ,  G06F21/64 ,  H04L9/32 ,  G06F21/51

CPC classification number: H04L9/302 ,  G06F11/1417 ,  G06F21/51 ,  G06F21/572 ,  G06F21/575 ,  G06F21/64 ,  H04L9/14 ,  H04L9/3239 ,  H04L9/3247 ,  H04L9/3249 ,  H04L63/06 ,  H04L63/08

Abstract: A method and an apparatus for establishing an operating environment by certifying a code image received from a host over a communication link are described. The code image may be digitally signed through a central authority server. Certification of the code image may be determined by a fingerprint embedded within a secure storage area such as a read only memory (ROM) of the portable device based on a public key certification process. A certified code image may be assigned a hash signature to be stored in a storage of the portable device. An operating environment of the portable device may be established after executing the certified code.

Abstract translation: 描述了通过通过通信链路验证从主机接收的代码图像来建立操作环境的方法和装置。 代码图像可以通过中央授权服务器进行数字签名。 代码图像的认证可以由嵌入在诸如便携式设备的只读存储器（ROM）的安全存储区域内的指纹基于公钥认证过程来确定。 可以向经认证的代码图像分配要存储在便携式设备的存储器中的散列签名。 可以在执行认证代码之后建立便携式设备的操作环境。