Validating a system with multiple subsystems using trusted platform modules and virtual platform modules
View Patent ↗Software validation is provided for a breakout system having multiple subsystems at the edge of a mobile data network. The software validation utilizes one or more trusted platform modules (TPM) to secure multiple subsystems including virtual machines in the breakout system. Hash values for the software in the various subsystems are placed in Platform Configuration Registers (PCRs) of the TPM. The TPM cryptographically signs quotes, which are a collection of hash values from the PCRs. The breakout system produces an extensible markup language (XML) file with the signed quotes related to the subsystems and sends them to a network management system for verification. The network management system validates the software configured on the breakout system using a public key to access the quotes and compares the values to known good values stored in an inventory record associated with the specific breakout system being validated.
1. A method for providing security in a system with multiple subsystems, the method comprising the steps of:
obtaining validation quotes from a plurality of subsystems, where the validation quotes comprise digitally signed hash values from platform configuration registers (PCRs) of a trusted platform module (TPM),
creating an extensible markup language (XML) file with the validation quotes;
sending the XML file to a network management system for validation of the system; and
parsing the XML file and using public keys to compare the validation quotes to known good values stored in a database by the network management system to validate the system comprising the steps of:
using an endpoint identification (ID) in the XML file to look up a record with known good values for the system;
using a public key to check the digitally signed quotes of the XML file;
verifying each level of quotes in the XML file by comparing the PCR values in the validation quotes to the corresponding values in the record;
if the PCR values verify with the known good values then generate a system validated message, if the PCR vales do not verify with the known good values then generate a validation failed message to a policy decision point.
2. The method of claim 1 wherein a public key in the XML file is used to look up a record with known good values for the system in place of the endpoint ID.
3. The method of claim 1 wherein the system is a breakout appliance for a mobile data network.
4. The method of claim 1 wherein the first subsystem further comprises at least one virtual machine with a virtual TPM, and wherein the platform services mechanism includes PCR values from the virtual TPM in the XML file.
5. A method for providing security in a breakout appliance in a mobile data network, the method comprising the steps of:
providing a breakout system associated with one of a plurality of basestations, where the plurality of basestations each communicate with a corresponding antenna that transmits and receives radio signals to and from user equipment, wherein the plurality of basestations are part of a radio access network that communicates with a core network in the mobile data network;
providing a service processor in the breakout system, the service processor have a first trusted platform module (TPM) with PCRs that are loaded with hash values of the service processor,
providing a system controller having a second TPM with PCRs;
providing a telco breakout subsystem that provides hash values to the PCRs of the second TPM; and
validating the security of the combined system of subsystems including the service processor, system controller and telco breakout subsystem by collecting hash values from the various subsystems, digitally signing the PCR registers of the first TPM and the second TPM, creating an XML file with the PCR registers of the first TPM and the second TPM, and sending the XML file to a management system to be compared to a known good value.
6. The method of claim 5 wherein the step of validating the combined system further comprises the steps of:
using an endpoint identification (ID) in the XML file to look up a record with known good values for the system;
using a public key to check the digitally signed quotes of the XML file;
verifying each level of quotes in the XML file by comparing the PCR values in the validation quotes to the corresponding values in the record;
if the PCR values verify with the known good values then generate a system validated message, if the PCR vales do not verify with the known good values then generate a validation failed message to a policy decision point.
7. The method of claim 6 wherein the validation failed message to the policy decision point reports a subsystem that failed and the policy decision point determines whether to re-install the subsystem software and retry validation.
8. The method of claim 5 wherein the first subsystem further comprises at least one virtual machine with a virtual TPM, and wherein the platform services mechanism includes PCR values from the virtual TPM in the XML file.
9. The method of claim 5 wherein a public key in the XML file is used to look up a record with known good values for the system in place of the endpoint ID.