可认证软件升级方案在小型嵌入式系统中的应用

Certifiable Software Upgrade Scheme in Small Embedded System

嵌入式系统的功能需随用户需求变化,要求具有软件升级功能。在一些安全性要求较高的领域,嵌入式系统原有的升级方式已经不能满足用户需求。文章提出一种可认证的软件升级方案,依赖安全性较高的散列函数对消息来源和内容提供认证保护,并且横向对比MD5、SHA-1和SHA-23种算法的优缺点,选取最适应嵌入式系统的方案——HMAC-MD5-128函数作为哈希消息认证码(Hash-based Message Authentication Code,HMAC)函数。

The function of embedded system needs to change frequently with the needs of users, and it requires software upgrade function. In some areas with high security requirements, the original upgrade method can no longer meet the needs of users. This paper proposes an authenticated software upgrade scheme, which relies on the hash function with high security to provide authentication protection for the source and content of the message. And the advantages and disadvantages of MD5, SHA-1 and SHA-2 algorithms are compared horizontally, and the most suitable scheme for embedded system, HMAC-MD5-128 function, is selected as Hash-based Message Authentication Code(HMAC) function.