Security for USB-based device configuration
A universal serial bus device, including: a main body; a connection portion attached to the main body; a processor; a storage portion storing a hash function executable by the processor, the hash function producing a hash value; a non-changing visual code on the main body, the visual code being readable by an optical scanner and corresponding to the hash function; and an electronic display configured to display the hash value.
1. A universal serial bus device, comprising:
a main body;
a connection portion attached to the main body;
a processor;
a storage portion storing a hash function executable by the processor, the hash function producing a hash value that is a real-time hash value of a content in the storage portion;
a non-changing visual code on the main body, the non-changing visual code being readable by an optical scanner and corresponding to a predetermined hash value; and
an electronic display configured to display the hash value,
wherein the displayed hash value is compared to the non-changing visual code corresponding to the predetermined hash value and another hash value obtained using a certificate signing request to validate a secure state of the universal serial bus device, wherein the predetermined hash value is embedded in a certificate using an extension mechanism.
2. The device of claim 1 , wherein the non-changing visual code represents a uniform resource locator corresponding to the predetermined hash value.
3. The device of claim 2 , wherein the uniform resource locator is an address of a website that contains an acceptable value of the predetermined hash value.
4. The device of claim 3 , wherein the non-changing visual code is a quick response code.
5. The device of claim 2 , wherein the universal resource locator corresponds to an x.509 certificate.
6. The device of claim 1 , wherein the non-changing visual code is a quick response code.
7. The device of claim 1 , wherein the non-changing visual code is a three-dimensional feature of the main body.
8. The device of claim 1 , wherein the non-changing visual code is etched into the main body.
9. The device of claim 1 , wherein the device is a universal serial bus memory device.
10. A method, comprising:
initiating a real time calculation by a target device having an electronic display and content, the calculation being of a hash of the content of the target device to create a hash value;
displaying the hash value on the display of the target device;
producing a predetermined hash value from a non-changing visual code of the target device, the non-changing visual code being readable by an optical scanner;
obtaining another hash value utilizing a certificate signing request;
in response to a determination that the hash value on the display matches the predetermined hash value and the another hash value, validating the content of the target device, wherein the predetermined hash value is embedded in a certificate using an extension mechanism; and
in response to a determination that the hash value on the display does not match the predetermined hash value and the another hash value, failing to validate the content of the target device.
11. The method of claim 10 , wherein the predetermined hash value corresponds with the non-changing visual code that includes a quick reference code associated with the target device.
12. The method of claim 11 , wherein the non-changing visual code is etched into the main body of the target device.
13. The method of claim 10 , wherein the predetermined hash value corresponds with the non-changing visual code that includes a universal resource locator that corresponds to an x.509 certificate.
14. The method of claim 10 , wherein the predetermined hash value corresponds with the non-changing visual code that includes a uniform resource locator, the uniform resource locator being an address of a website that contains the predetermined hash value.
15. The method of claim 10 , wherein the predetermined hash value corresponds with the non-changing visual code that includes a three-dimensional feature of the target device.
16. The method of claim 15 , wherein the non-changing visual code is etched into the target device.
17. The method of claim 10 , wherein the initiating results from a user pressing a button on the target device.
18. A computer implemented method, comprising:
creating in real time, by a computer device, a hash value, the hash value being of a content in a memory of the computer device created using a hash function on a hash function resident in the memory of the computer device;
displaying, by the computer device, the hash value on an electronic display on the computer device; and
displaying a non-changing visual code on a body of the computer device, the non-changing visual code corresponding to a universal resource locator being readable by a code reader and corresponding to a predetermined hash value that validates a content of the memory of the computer device by matching the predetermined hash value to the hash value and another hash value, wherein the predetermined hash value is embedded in a certificate using an extension mechanism and the another hash value is obtained utilizing a certificate signing request.
19. The computer implemented method of claim 18 , wherein the non-changing visual code corresponds to a uniform resource locator, the uniform resource locator being an address of a website that contains the predetermined hash value.
20. The computer implemented method of claim 18 , wherein the non-changing visual code is a three-dimensional feature of the body of the computer device.