Proven, reliable programming

SEGGER’s secure programming solution — fully trusted and established in the field — ensures programming success while also keeping communication overhead low. The Flasher Secure device, when used as a stand-alone tool, helps to transfer software for embedded systems safely, reliably and quickly to flash memory in production. Like all other Flasher products, the Flasher Secure’s reliable target interfaces ensures universal target support with maximum reliability.

Volume control via authorized programming

To set up a complete infrastructure meeting the needs of secure programming with the Flasher Secure, the Flasher Secure Server (FSS) is essential. As a key component in secure production processes, the FSS enables owners of intellectual property (IP) to manage complex production processes at the contract manufacturer (CM). Based on SEGGER’s web server emWeb, the FSS ensures centralized and flexible production management, including the possibility of restricting the volume and monitoring yield. Located in a trusted environment, the FSS serves as database and controlling entity between IP owner and CM during production processes. It authorizes every programming attempt and updates all operational data (e.g. numbers of devices, serial numbers). It also provides an interface for Flasher Secure clients and a web interface for administration in order to keep track of projects and to support intervention in the case of an unusual event.

Device authentication for protection against cloning

Preventing counterfeiting by enhancing the device’s intrinsic security is another crucial step in securing programming processes. Utilizing digital signatures allows for the identification of genuine hardware and firmware to maintain product integrity and confidentiality. Using algorithms from SEGGER’s digital signature suite emSecure, SEGGER’s Hardware Authentication Package (formerly: RSA Verification Package) enables unique IDs to be read from the system being programmed at the contract manufacturer’s facility. The firmware is inseparably connected to the unique ID of the target device, making it impossible to run on any device other than the intended one. This means that the hardware can be authenticated against the stored signature using the unique identifier to prevent the firmware from running or booting if the authentication fails. This mechanism helps developers to create secure products and protect their IP against theft.

Protected communication right up to the target device (TELP)

The final step in securing programming includes protected communication between any programmer and the target memory, aiming to prevent eavesdropping even with direct access to the production environment. The highest level of security in production processes is achieved when all connections to the production tools are secured by TLS (Transport Layer Security) as is the case with SEGGER’s Secure Sockets Layer emSSL. Using SEGGER’s Target Encrypted Link Package (TELP) adds another layer of protection, ensuring end-to-end security by adding encryption on the target side as well. While TELP is an optional add-on package, it should be considered essential in cases where the hardware itself cannot provide IP protection. In this case, TELP installs a bootloader to handle security. Before encrypted transmission even starts, the device is checked to ensure that the target CPU is genuine.

When production volume reaches a certain threshold, companies have the opportunity to benefit from using a contract manufacturer (CM). Most companies, however, are reluctant to take this next step for fear of losing control over their IP, given that a CM will be trusted to store the components of production. Thanks to authentication algorithms, the Flasher Secure ensures that only authorized bootloaders and firmware are used in the system. If one component is not genuine, the device stops working, making it impossible to .copy firmware and/or bootloaders from one device to another.

As an IP owner, you have full end-to-end control over your production chain. To secure your IP and production run, Flasher Secure uses:

As an essential step in SEGGER’s Secure Product Lifecycle Management (SPLM), the Flasher Secure, in combination with emSecure, authenticates hardware in production.