USING ePKI TECHNOLOGY TO SECURELY UPDATE OF EMBEDDED SOFTWARE OF TRUSTED HARDWARE AND SOFTWARE SYSTEM

The creation of trusted information systems requires the establishment of trusted supply chains for both hardware and software components. From the perspective of information technology, trust means confidence that all system components, processes, and data are authentic, integral, secure. One of the widely accepted approaches to ensuring trust in information systems is the construction of trusted chains based on Public Key Infrastructure (PKI) technology. This paper examines the aspects of building a trusted supply chain based on PKI in the context of updating embedded software in trusted hardware-software systems. It provides a general description of the steps in the firmware upgrade process, describes the formats and basic operations for preparing and loading the firmware image, and estimates the computational resources required to perform these operations. It should be noted that the described technology can also be applied to update system and application software. This publication will be of interest to specialists in the development of trusted electronic components, trusted devices, system integrators of critical information infrastructure, developers of end-to-end technological processes for the development and production of trusted devices and information systems.