Granted Patent B2

US 11,853,417 · App. 17/132,001 · Granted Dec 26, 2023

Inventors: Maxim Balin (Gan Yavne, IL); Tomer Shachar (Omer, IL); Yevgeni Gehtman (Modi'in, IL)

Assignee: EMC IP Holding Company LLC

G06F21/554G06F21/54G06F21/602

Abstract

Claims (32)

1. A method, comprising:

obtaining a plurality of platform configuration values for a hardware device from a local platform configuration value table of the hardware device, wherein the hardware device comprises a plurality of software components, and wherein the platform configuration values are generated by applying a function to one or more of: (i) a content of respective ones of the plurality of software components of the hardware device, and (ii) an identifier of respective ones of the plurality of software components of the hardware device, wherein the function generates the plurality of platform configuration values, and wherein the local platform configuration value table of the hardware device is secured by a cryptographic module of the hardware device;

comparing the obtained platform configuration values for the hardware device to one or more platform configuration values stored in a second platform configuration table to identify one or more software changes to at least one of the plurality of software components of the hardware device; and

performing one or more automated actions based at least in part on a result of the comparison, wherein the one or more automated actions comprise one or more of (i) initiating a reboot of the hardware device and (ii) sending one or more notifications to at least one recipient device;

wherein the method is performed by at least one processing device comprising a processor coupled to a memory.

2. The method of claim 1 , wherein the one or more platform configuration values for the hardware device are obtained by an integrity validation monitor associated with the hardware device, and wherein the integrity validation monitor sends the obtained platform configuration values for the hardware device to an integrity validation server that securely stores the second platform configuration table and performs the comparison.

3. The method of claim 1 , wherein the one or more platform configuration values for the hardware device are stored in the second platform configuration table in response to the hardware device being produced or in response to at least one software item of the hardware device being updated.

4. The method of claim 1 , wherein the comparison detects an unknown platform configuration value for the hardware device in the second platform configuration table.

5. The method of claim 2 , wherein the hardware device comprises one of a plurality of hardware devices at a first location that is different than a second location of the integrity validation server.

6. The method of claim 1 , wherein the one or more platform configuration values for the hardware device comprise a hash value related to the respective software component.

7. The method of claim 1 , wherein the one or more software changes to the at least one of the plurality of software components of the hardware device comprise one or more of: (i) a change to the content of the at least one software component; and (ii) an addition of a new software component to the plurality of software components.

8. An apparatus comprising:

at least one processing device comprising a processor coupled to a memory;

the at least one processing device being configured to implement the following steps:

obtaining a plurality of platform configuration values for a hardware device from a local platform configuration value table of the hardware device, wherein the hardware device comprises a plurality of software components, and wherein the platform configuration values are generated by applying a function to one or more of: (i) a content of respective ones of the plurality of software components of the hardware device, and (ii) an identifier of respective ones of the plurality of software components of the hardware device, wherein the function generates the plurality of platform configuration values, and wherein the local platform configuration value table of the hardware device is secured by a cryptographic module of the hardware device;

comparing the obtained platform configuration values for the hardware device to one or more platform configuration values stored in a second platform configuration table to identify one or more software changes to at least one of the plurality of software components of the hardware device; and

performing one or more automated actions based at least in part on a result of the comparison, wherein the one or more automated actions comprise one or more of (i) initiating a reboot of the hardware device and (ii) sending one or more notifications to at least one recipient device.

9. The apparatus of claim 8 , wherein the one or more platform configuration values for the hardware device are obtained by an integrity validation monitor associated with the hardware device, and wherein the integrity validation monitor sends the obtained platform configuration values for the hardware device to an integrity validation server that securely stores the second platform configuration table and performs the comparison.

10. The apparatus of claim 8 , wherein the one or more platform configuration values for the hardware device are stored in the second platform configuration table in response to the hardware device being produced or in response to at least one software item of the hardware device being updated.

11. The apparatus of claim 8 , wherein the comparison detects an unknown platform configuration value for the hardware device in the second platform configuration table.

12. The apparatus of claim 9 , wherein the hardware device comprises one of a plurality of hardware devices at a first location that is different than a second location of the integrity validation server.

13. The apparatus of claim 8 , wherein the one or more software changes to the at least one of the plurality of software components of the hardware device comprise one or more of: (i) a change to the content of the at least one software component; and (ii) an addition of a new software component to the plurality of software components.

14. A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device to perform the following steps:

obtaining a plurality of platform configuration values for a hardware device from a local platform configuration value table of the hardware device, wherein the hardware device comprises a plurality of software components, and wherein the platform configuration values are generated by applying a function to one or more of: (i) a content of respective ones of the plurality of software components of the hardware device, and (ii) an identifier of respective ones of the plurality of software components of the hardware device, wherein the function generates the plurality of platform configuration values, and wherein the local platform configuration value table of the hardware device is secured by a cryptographic module of the hardware device;

comparing the obtained platform configuration values for the hardware device to one or more platform configuration values stored in a second platform configuration table to identify one or more software changes to at least one of the plurality of software components of the hardware device; and

performing one or more automated actions based at least in part on a result of the comparison, wherein the one or more automated actions comprise one or more of (i) initiating a reboot of the hardware device and (ii) sending one or more notifications to at least one recipient device.

15. The non-transitory processor-readable storage medium of claim 14 , wherein the one or more platform configuration values for the hardware device are obtained by an integrity validation monitor associated with the hardware device, and wherein the integrity validation monitor sends the obtained platform configuration values for the hardware device to an integrity validation server that securely stores the second platform configuration table and performs the comparison.

16. The non-transitory processor-readable storage medium of claim 14 , wherein the one or more platform configuration values for the hardware device are stored in the second platform configuration table in response to the hardware device being produced or in response to at least one software item of the hardware device being updated.

17. The non-transitory processor-readable storage medium of claim 14 , wherein the comparison detects an unknown platform configuration value for the hardware device in the second platform configuration table.

18. The non-transitory processor-readable storage medium of claim 15 , wherein the hardware device comprises one of a plurality of hardware devices at a first location that is different than a second location of the integrity validation server.

19. The non-transitory processor-readable storage medium of claim 14 , wherein the one or more platform configuration values for the hardware device comprise a hash value related to the respective software component.

20. The non-transitory processor-readable storage medium of claim 14 , wherein the one or more software changes to the at least one of the plurality of software components of the hardware device comprise one or more of: (i) a change to the content of the at least one software component; and (ii) an addition of a new software component to the plurality of software components.

Assignments (9)