Design and Implementation of Security System for Providing Secure Boot and Firmware Update in Low-end IoT Device

Kiyeong Lee, Byoungseon Kim, Jinsung Cho

http://doi.org/10.5626/JOK.2018.45.4.321

Low-end IoT devices are problematic due to the many limitations involved in applying IoT devices to various existing security solutions. This is because most security solutions are targeted at high-performance PC environments. These limitations are causing steadily increasing technical security vulnerabilities and various security threats to IoT devices. In this paper, we propose a secure boot and firmware update system that can be applied in a constrained environment. At the secure boot, the proposed system verifies the integrity of the firmware of the device. The secure firmware update performs reliability verification of the subject attempting to update. Finally, we analyze the security performance of the proposed system by simulating various threats that may occur in low-end IoT devices.