Granted Patent B2

US 11,568,091 · App. 17/149,956 · Granted Jan 31, 2023

Inventors: Charles D. Robison (Buford, GA); Vaibhav Soni (Austin, TX)

Assignee: Dell Products L.P.

G06F21/73H04L9/0643H04L9/3268H04L9/50

Abstract

Claims (38)

1. A computer-implementable method for attesting component certificates to particular devices comprising:

configuring an enterprise hosted integrity protected distributed ledger to publish certificates including the component certificates;

providing authorization tokens that allow for component certificates to be published to the enterprise hosted integrity protected distributed ledger;

generating a manifest for a device that includes component identifiers and certificate identifiers used to access the component certificates on the distributed ledger;

providing a verification mechanism that discovers the enterprise hosted integrity protected distributed ledger; and

retrieving the component certificates from the enterprise hosted integrity protected distributed ledger using the certificate identifiers in the manifest.

2. The method of claim 1 , wherein the enterprise hosted integrity protected distributed ledger is a block chain.

3. The method of claim 1 , wherein the manifest further includes unique component information comprising one or more of serial numbers, service tags, unique identifiers, and lot number.

4. The method of claim 1 further comprising using a high security module to secure component certificates.

5. The method of claim 1 , wherein the verification mechanism includes a mobile application on an end user device.

6. The method of claim 1 , wherein the retrieving of the component certificates includes using decryption keys to access the enterprise hosted integrity protected distributed ledger.

7. The method of claim 1 further comprising publishing a signed device platform certificate to the enterprise hosted integrity protected distributed ledger.

8. A system comprising:

a processor;

a data bus coupled to the processor; and

a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:

configuring an enterprise hosted integrity protected distributed ledger to publish certificates including the component certificates;

providing authorization tokens that allow for component certificates to be published to the enterprise hosted integrity protected distributed ledger;

generating a manifest for a device that includes component identifiers and certificate identifiers used to access the component certificates on the distributed ledger;

providing a verification mechanism that discovers the enterprise hosted integrity protected distributed ledger; and

retrieving the component certificates from the enterprise hosted integrity protected distributed ledger using the certificate identifiers in the manifest.

9. The system of claim 8 , wherein the enterprise hosted integrity protected distributed ledger is a block chain.

10. The system of claim 8 , wherein the manifest further includes unique component information comprising one or more of serial numbers, service tags, unique identifiers, and lot number.

11. The system of claim 8 further comprising using a high security module to secure component certificates.

12. The system of claim 8 , wherein the verification mechanism includes a mobile application on an end user device.

13. The system of claim 8 , wherein the retrieving of the component certificates includes using decryption keys to access the enterprise hosted integrity protected distributed ledger.

14. The system of claim 8 further comprising publishing a signed device platform certificate to the enterprise hosted integrity protected distributed ledger.

15. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured to:

configure an enterprise hosted integrity protected distributed ledger to publish certificates including the component certificates;

provide authorization tokens for the component certificates to be published to the enterprise hosted integrity protected distributed ledger;

generate a manifest for a device that includes component identifiers and certificate identifiers used to access the component certificates on the distributed ledger;

provide a verification mechanism that discovers the enterprise hosted integrity protected distributed ledger; and

retrieve the component certificates from the enterprise hosted integrity protected distributed ledger using the certificate identifiers in the manifest.

16. The non-transitory, computer-readable storage medium of claim 15 , wherein the manifest further includes unique component information comprising one or more of serial numbers, service tags, unique identifiers, and lot number.

17. The non-transitory, computer-readable storage medium of claim 15 further comprising using a high security module to secure component certificates.

18. The non-transitory, computer-readable storage medium of claim 15 , wherein the verification mechanism includes a mobile application on an end user device.

19. The non-transitory, computer-readable storage medium of claim 15 , wherein the retrieving of the component certificates includes using decryption keys to access the enterprise hosted integrity protected distributed ledger.

20. The non-transitory, computer-readable storage medium of claim 15 further comprising publishing a signed device platform certificate to the enterprise hosted integrity protected distributed ledger.

Assignments (9)

Continuity (1)