Software Trusted Startup and Update Protection Scheme of IoT Devices

Existing trusted compute schemes designed for complex devices are hard to deploy on IoT devices with limited memory, low power, and weak processing capability. We propose a startup and update protection scheme for IoT devices that builds a Trusted Cryptography Module (TCM) on Zynq platform. SM3 and SM4 cryptography algorithms are deployed on the TCM to accelerate the hash and symmetry algorithm, ensuring integrity and confidentiality. We implement trusted startup and firmware update algorithms through software to adapt heterogeneous IoT devices and make update process security. We add hash verification and digital signature in the communicating process between the server and the TCM to resist integrity destruction and impersonation attack. Our scheme ensures the security of IoT devices running process and updates through TCM and solves the problem that existing models are difficult to deploy on IoT devices.