System and Method for Remote Attestating to Verify Firmware of Programmable Logic Controllers

摘要

The present invention is a PLC capable of remotely verifying the integrity of the firmware of an embedded device equipped with an RTOS (Real Time Operating System) while satisfying real time, safety, and light weight. It relates to a remote assurance verification apparatus and method for verifying the integrity of a firmware for the purpose of storage, storing an unaltered original image file of the firmware to be loaded, and designating an area of a flash memory to provide a MAC address-based hardware Verification means (EWS) that makes a verification request with ID; After checking hardware ID and time information according to verification request of verification means (EWS), if it is a valid user, the random value (cryptographic nonce) received together is converted into the pseudo-random number generator. a means to be verified (PLC) that generates a hash value by using it as a key value, and sends the generated hash value to a verification unit (EWS) when traversing all memory blocks; and the verification unit (EWS) has its own It is to determine whether forgery or not by comparing the generated hash value with the hash value transmitted from the means to be verified.