Local oversight and provisioning of BIOS activity
View Patent ↗Approaches for locally attesting an operational condition of a computer system during powering on the computer system. Prior to an operating system being loaded, an attestation client, executing on a computer system, analyzes a set of resources of the computer system to create measurement data. The attestation client provides the measurement data to an attestation server executing in a secure enclave on the computer system. The attestation server processes the measurement data and provides the processed measurement data to a remediation server. Upon the computer system being determined to be operationally healthy, the remediation server provides an unlock key to a locked persistent storage to permit the computer system to read the operating system stored on the persistent storage. Thereafter, a BIOS on the computer system may read the operating system and permit the same to be loaded on the computer system.
1. A non-transitory machine-readable storage medium storing one or more sequences of instructions for locally attesting an operational condition of a computer system during powering on the computer system, which when executed by one or more processors, cause:
prior to loading any operating system on the computer system, an attestation client, executing on the computer system, analyzing a set of resources residing on the computer system to create measurement data describing a current state of the set of resources,
prior to loading any operating system on the computer system, the attestation client providing the measurement data to an attestation server executing in a secure enclave residing on the computer system;
the attestation server processing the received measurement data to determine if the computer system is operationally healthy;
upon the attestation server providing the processed measurement data to a remediation server and the computer system being deemed operationally healthy, the remediation server, executing in said secure enclave, providing an unlock key to a locked persistent storage to permit the computer system to read the operating system stored on the persistent storage; and
the attestation server consulting policy data to determine whether to update a BIOS residing on the computer system to a newer version by replacing one or more files stored by the computer system with a set of updated files retrieved from a known healthy image.
2. The non-transitory machine-readable storage medium of claim 1 , wherein the attestation client executes in the secure enclave of the computer system.
3. The non-transitory machine-readable storage medium of claim 1 , wherein
the known healthy image is retrieved from a remote location over a network.
4. The non-transitory machine-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further cause:
the remediation server consulting policy data to determine whether to render one or more persistent storage mediums of the computer system inoperable.
5. The non-transitory machine-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further cause:
the remediation server consulting policy data to determine whether to initialize a persistent storage deemed corrupted by malicious code.
6. The non-transitory machine-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further cause:
the remediation server consulting policy data to determine whether to cause an audio or visual recording device to begin recording.
7. The non-transitory machine-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further causes:
prior to loading any operating system on the computer system, upon the remediation server determining a set of one or more files on the computer system does not satisfy a set of heuristics, displaying an interface through which a user may communicate with a support center over a network to seek a remedy.
8. The non-transitory machine-readable storage medium of claim 1 , wherein execution of the one or more sequences of instructions further causes:
prior to loading any operating system on the computer system, upon the remediation server determining a set of one or more files on the computer system does not satisfy a set of heuristics, updating one or more configuration settings of the BIOS to a predefined setting before continuing a boot process in accordance with the predefined settings of the BIOS.
9. The non-transitory machine-readable storage medium of claim 1 , wherein the attestation client is a BIOS driver and in a root of trust of the BIOS.
10. The non-transitory machine-readable storage medium of claim 1 , wherein said set of one or more resources includes a set of files, a set of volatile memory, and a set of blocks stored on a persistent storage.
11. A computer system configured to perform local attestation an operational condition of said computer system during powering on the computer system, comprising:
one or more processors; and
one or more computer-readable storage mediums storing one or more sequences of instructions, which when executed, cause:
prior to loading any operating system on the computer system, an attestation client, executing on the computer system, analyzing a set of resources residing on the computer system to create measurement data describing a current state of the set of resources,
prior to loading any operating system on the computer system, the attestation client providing the measurement data to an attestation server executing in a secure enclave residing on the computer system;
the attestation server processing the received measurement data to determine if the computer system is operationally healthy;
upon the attestation server providing the processed measurement data to a remediation server and the computer system being deemed operationally healthy, the remediation server, executing in said secure enclave, providing an unlock key to a locked persistent storage to permit the computer system to read the operating system stored on the persistent storage; and
the attestation server consulting policy data to determine whether to update a BIOS residing on the computer system to a newer version by replacing one or more files stored by the computer system with a set of updated files retrieved from a known healthy image.
12. The computer system of claim 11 , wherein the attestation client executes in the secure enclave of the computer system.
13. The computer system of claim 11 , wherein
the known healthy image is retrieved from a remote location over a network.
14. The computer system of claim 11 , wherein execution of the one or more sequences of instructions further cause:
the remediation server consulting policy data to determine whether to render one or more persistent storage mediums of the computer system inoperable.
15. The computer system of claim 11 , wherein execution of the one or more sequences of instructions further cause:
the remediation server consulting policy data to determine whether to initialize a persistent storage deemed corrupted by malicious code.
16. The computer system of claim 11 , wherein execution of the one or more sequences of instructions further cause:
the remediation server consulting policy data to determine whether to cause an audio or visual recording device to begin recording.
17. The computer system of claim 11 , wherein execution of the one or more sequences of instructions further causes:
prior to loading any operating system on the computer system, upon the remediation server determining a set of one or more files on the computer system does not satisfy a set of heuristics, displaying an interface through which a user may communicate with a support center over a network to seek a remedy.
18. The computer system of claim 11 , wherein execution of the one or more sequences of instructions further causes: prior to loading any operating system on the computer system, upon the remediation server determining a set of one or more files on the computer system does not satisfy a set of heuristics, updating one or more configuration settings of the BIOS to a predefined setting before continuing a boot process in accordance with the predefined settings of the BIOS.
19. The computer system of claim 11 , wherein said set of one or more resources includes a set of files, a set of volatile memory, and a set of blocks stored on a persistent storage.
20. A method for locally attesting an operational condition of a computer system during powering on the computer system, comprising:
prior to loading any operating system on the computer system, an attestation client, executing on the computer system, analyzing a set of resources residing on the computer system to create measurement data describing a current state of the set of resources,
prior to loading any operating system on the computer system, the attestation client providing the measurement data to an attestation server executing in a secure enclave residing on the computer system;
the attestation server processing the received measurement data to determine if the computer system is operationally healthy;
upon the attestation server providing the processed measurement data to a remediation server and the computer system being deemed operationally healthy, the remediation server, executing in said secure enclave, providing an unlock key to a locked persistent storage to permit the computer system to read the operating system stored on the persistent storage; and
the attestation server consulting policy data to determine whether to update a BIOS residing on the computer system to a newer version by replacing one or more files stored by the computer system with a set of updated files retrieved from a known healthy image.