Secure yet flexible system architecture for secure devices with flash mass storage memory

Abstract

A device with mass storage capability that uses a readily available non secure memory for the mass storage but has firmware (and hardware) that provides security against unauthorized copying of data. This is true even though the firmware itself is stored in the non secure mass storage memory, and therefore potentially vulnerable to hacking. An indication of the authenticity of the firmware must be present before it will be executed by the device. This protects the device contents from unauthorized duplication or tampering. Additional functionality can be added to the device with additional firmware applications, and the authenticity of those additional applications will also be verified before they will be executed. This further prevents unauthorized copying or tampering of secure content through any mechanisms that may be unscrupulously introduced. Any data within the mass storage memory may also be encrypted.

1 . A flash memory based device comprising:
 a mass storage repository comprising flash memory;   a first level of the firmware stored in a physical access partition of the mass storage repository;   a second level of the firmware stored in a logical access partition of the mass storage repository;   a logical to physical interface routine that maps logical addresses to physical addresses in the logical access partition; and   a controller that executes the first level of firmware in the physical access partition without use of the logical to physical interface routine, but executes the second level of firmware through the logical to physical interface routine.   
   
   
       2 . The flash memory based device of  claim 1 , wherein the logical to physical interface routine is part of the first level of firmware. 
   
   
       3 . The flash memory based device of  claim 2 , wherein a location of the second level of firmware is mapped by the first level of firmware. 
   
   
       4 - 26 . (canceled)