Skip to main content

OrBIT User Guide

Protected applications information

In this section:

Note

Protected applications information is only available for the eSecIP Professional edition.

The protectedApplicationsInfo information type is optional for the product configuration file.

Parts of the application defined in the applications section of the configuration file can be obfuscated. The application parts are extracted, obfuscated, and written to the BLOB. The BLOB integrity is validated when each device powers up, and upon successful validation the parts are de-obfuscated. This protects parts of the product application while the device is at rest.

Use the destAddress field to write the obfuscated part to the device’s heap in RAM memory. If the field is not used, the obfuscated part will remain in the BLOB until it is extracted by the application.

Use a separate configuration object for each part of the application to obfuscate.

Field name

Description

destAddress

The location where the application part is placed after validation and de-obfuscation. Optional. If the object is to remain within the BLOB until the application requests it, this field must be omitted.

obfuscation

The name of the obfuscation record used for obfuscation. Optional. If the object is not to be obfuscated, this field must be omitted.

regionSize

The size of the protected application part to be extracted. Mandatory.

regionStart

The starting memory address of the protected application part to be extracted. Mandatory.

usageClass

An ID to be used for locating a protected application part inside the BLOB. Mandatory.

Table 11. Summary of available fields for the protectedApplicationsInfo information type


For reference information about the fields, see Descriptions of configuration fields.