Flasher Secure
The flash programmer for authenticated off-site production

SEGGER's secure programming solution — fully trusted and established in the field — ensures programming success while also keeping communication overhead low. The Flasher Secure device, when used as a stand-alone tool, helps to transfer software for embedded systems safely, reliably and quickly to flash memory in production. Like all other Flasher products, the Flasher Secure's reliable target interfaces ensures universal target support with maximum reliability.

To set up a complete infrastructure meeting the needs of secure programming with the Flasher Secure, the Flasher Secure Server (FSS) is essential. As a key component in secure production processes, the FSS enables owners of intellectual property (IP) to manage complex production processes at the contract manufacturer (CM). Based on SEGGER’s web server emWeb, the FSS ensures centralized and flexible production management, including the possibility of restricting the volume and monitoring yield. Located in a trusted environment, the FSS serves as database and controlling entity between IP owner and CM during production processes. It authorizes every programming attempt and updates all operational data (e.g. numbers of devices, serial numbers). It also provides an interface for Flasher Secure clients and a web interface for administration in order to keep track of projects and to support intervention in the case of an unusual event.

Preventing counterfeiting by enhancing the device’s intrinsic security is another crucial step in securing programming processes. Utilizing digital signatures allows for the identification of genuine hardware and firmware to maintain product integrity and confidentiality. Using algorithms from SEGGER’s digital signature suite emSecure, SEGGER’s Anti-Cloning Package (formerly: Hardware Authentication Package) enables unique IDs to be read from the system being programmed at the contract manufacturer’s facility. The firmware is inseparably connected to the unique ID of the target device, making it impossible to run on any device other than the intended one. This means that the hardware can be authenticated against the stored signature using the unique identifier to prevent the firmware from running or booting if the authentication fails. This mechanism helps developers to create secure products and protect their IP against theft.

The final step in securing programming includes protected communication between any programmer and the target memory, aiming to prevent eavesdropping even with direct access to the production environment. The highest level of security in production processes is achieved when all connections to the production tools are secured by TLS (Transport Layer Security) as is the case with SEGGER’s Secure Sockets Layer emSSL. Using SEGGER’s Target Encrypted Link Package (TELP) adds another layer of protection, ensuring end-to-end security by adding encryption on the target side as well. While TELP is an optional add-on package, it should be considered essential in cases where the hardware itself cannot provide IP protection. In this case, TELP installs a bootloader to handle security. Before encrypted transmission even starts, the device is checked to ensure that the target CPU is genuine.

Detailed information on the Target Encrypted Link Package (TELP)...