A boot Read-Only Memory (ROM) update method of an embedded system. The embedded system includes a memory, which includes a user data area and a boot ROM area. The boot ROM area includes a first area and a second area. The embedded system includes a ROM, which is configured to copy a first boot code from the boot ROM area during boot-up. The first boot code is disposed in the first area and includes a first boot ROM image and a first signature for the first boot ROM image. The boot ROM update method comprises: writing a second boot code to the second area in response to a first ROM update command, the second boot code including a second boot ROM image and a second signature for the second boot ROM image; verifying validity of the second signature; and if the second signature is valid, swapping the first area and the second area.
展开▼