Securing operating system configuration using hardware
View Patent ↗A method, system, and computer program product includes receiving, in a booted state of a computing system, a request to load an operating system configuration. The method further includes storing, automatically in response to receiving the request, a digital key to authenticate the operating system configuration. The method further includes restarting the computing system. In response to restarting the computing system and while the computing system is in a pre-boot state, the method includes: validating that the digital key stored is one for a valid operating system configuration; receiving, from a user interface physically coupled to the computing system, a signal confirming the received request; authenticating, in response to receiving the signal, the operating system configuration using the digital key; and booting, in response to the authenticating, the operating system configuration.
1. A method comprising:
receiving, from a user application executing under a first operating system configuration on a computing device, a request to execute a second operating system configuration of a set of operating system configurations, wherein the second operating system configuration is signed by a private key of a public-private key pair; and
during a pre-boot state of the computing device:
receiving, from a local interface physically coupled to the computing device, a signal confirming the received request;
moving a public key of the public-private key pair to a protected memory in response to receiving the signal confirming the request; and
executing a boot loader having access to the protected memory to authenticate the second operating system configuration using the public key stored in the protected memory, and to boot the second operating system configuration in response to the authenticating.
2. The method of claim 1 , wherein the second operating system configuration comprises an operating system kernel compiled with a set of parameters;
wherein the set of parameters determines software modules loadable under the second operating system configuration.
3. The method of claim 2 , wherein the set of parameters determines enforcement of an access control policy of the second operating system configuration.
4. The method of claim 1 , wherein the protected memory is only writable by a set of applications having an executable code integrity authenticated by a hardware component of the computing system.
5. A system, comprising:
a user interface terminal; and
a computing system physically coupled to the user interface terminal and having a memory and a processor;
wherein the memory includes computer executable code that causes the system:
receive, from a user application executing under a first operating system configuration on a computing device, a request to execute a second operating system configuration of a set of operating system configurations, wherein the second operating system configuration is signed by a private key of a public-private key pair; and
during a pre-boot state of the computing device:
receive, from the user interface terminal, a signal confirming the received request;
move a public key of the public-private key pair to a protected memory of the computing system in response to receiving the signal confirming the request;
and execute a boot loader having access to the protected memory to authenticate the second operating system configuration using public key stored in the protected memory, and to boot the second operating system configuration in response to the authenticating.
6. The system of claim 5 , wherein the second operating system configuration comprises an operating system kernel compiled with a set of parameters;
wherein the set of parameters determines software modules loadable under the second operating system configuration.
7. The system of claim 6 , wherein the set of parameters determines enforcement of an access control policy of the second operating system configuration.
8. The system of claim 5 , wherein the protected memory is only writable by a set of applications having an executable code integrity authenticated by a hardware component of the computing system.
9. A computer program product for securely booting a computing system, the computer program product including a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a processor to:
receive, from a user application executing under a first operating system configuration on a computing device, a request to execute a second operating system configuration of a set of operating system configurations, wherein the second operating system configuration is signed by a private key of a public-private key pair; and
during a pre-boot state of the computing device:
receive, from the user interface terminal, a signal confirming the received request;
move a public key of the public-private key pair to a protected memory of the computing system in response to receiving the signal confirming the request; and
execute a boot loader having access to the protected memory to authenticate the second operating system configuration using public key stored in the protected memory, and to boot the second operating system configuration in response to the authenticating.
10. The computer program product of claim 9 , wherein the second operating system configuration comprises an operating system kernel compiled with a set of parameters;
wherein the set of parameters determines software modules loadable under the second operating system configuration.
11. The computer program product of claim 10 , wherein the set of parameters determines enforcement of an access control policy of the second operating system configuration.
12. The computer program product of claim 9 , wherein the protected memory is only writable by a set of applications having an executable code integrity authenticated by a hardware component of the computing system.