IP Library › Granted Patent US 11,188,653
Granted Patent B1
US 11,188,653 · App. 16/653,006 · Granted Nov 30, 2021

Verifying the integrity of a computing platform

Inventor: Christopher Luis Hamlin (The Sea Ranch, CA)
Assignee: Christopher Luis Hamlin
G06F21/57G06F2221/034
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,188,653
App. No.
16/653,006
Granted
Nov 30, 2021
Kind
B1
Abstract

Systems and techniques are described for verifying the integrity of a computing platform. Specifically, a software image can be generated that, when executed at a computing platform, verifies integrity of the computing platform. Next, the software image can be sent to the computing platform. The computing platform can execute the software image, thereby enabling the verification of the integrity of the computing platform.

Claims (39)

1. A method to verify integrity of a target instance of a computing platform, the method comprising:

executing a software image at the target instance of the computing platform, thereby causing the target instance of the computing platform to verify the integrity of the target instance of the computing platform by performing a set of operations, comprising:

measuring a first set of execution parameter values during an execution of a portion of the software image at the target instance of the computing platform; and

comparing the first set of execution parameter values with a second set of execution parameter values included in the software image, wherein the second set of execution parameter values is associated with executing the portion of the software image at a secure instance of the computing platform.

2. The method of claim 1 , wherein the set of operations further comprises:

determining a verification message based on said comparing the first set of execution parameter values with the second set of execution parameter values; and

sending the verification message to a secure computing platform.

3. The method of claim 2 , wherein the set of operations further comprises:

receiving instructions from the secure computing platform in response to the verification message; and

performing an action at the target instance of the computing platform based on the received instructions.

4. The method of claim 3 , wherein the action is resetting the target instance of the computing platform to a secure state.

5. The method of claim 3 , wherein the action is activating software code that was embedded in the software image.

6. The method of claim 1 , wherein at least one execution parameter is one of: total cycles, absolute starting time, absolute ending time, Global Positioning System (GPS) parameters, or a number of instructions that were executed.

7. A non-transitory computer-readable storage medium storing a software image that, when executed by a target instance of a computing platform, causes the target instance of the computing platform to perform a method to verify integrity of the target instance of the computing platform, the method comprising:

measuring a first set of execution parameter values during an execution of a portion of the software image at the target instance of the computing platform; and

comparing the first set of execution parameter values with a second set of execution parameter values included in the software image, wherein the second set of execution parameter values is associated with executing the portion of the software image at a secure instance of the computing platform.

8. The non-transitory computer-readable storage medium of claim 7 , wherein the method further comprises:

determining a verification message based on said comparing the first set of execution parameter values with the second set of execution parameter values; and

sending the verification message to a secure computing platform.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the method further comprises:

receiving instructions from the secure computing platform in response to the verification message; and

performing an action at the target instance of the computing platform based on the received instructions.

10. The non-transitory computer-readable storage medium of claim 9 , wherein the action is resetting the target instance of the computing platform to a secure state.

11. The non-transitory computer-readable storage medium of claim 9 , wherein the action is activating software code that was embedded in the software image.

12. The non-transitory computer-readable storage medium of claim 7 , wherein at least one execution parameter is one of: total cycles, absolute starting time, absolute ending time, Global Positioning System (GPS) parameters, or a number of instructions that were executed.

13. A target instance of a computing platform, comprising:

a processor; and

a non-transitory computer-readable storage medium storing a software image that, when executed by the processor, causes the target instance of the computing platform to perform a method to verify integrity of the target instance of the computing platform, the method comprising:

measuring a first set of execution parameter values during an execution of a portion of the software image at the target instance of the computing platform; and

comparing the first set of execution parameter values with a second set of execution parameter values included in the software image, wherein the second set of execution parameter values is associated with executing the portion of the software image at a secure instance of the computing platform.

14. The target instance of the computing platform of claim 13 , wherein the method further comprises:

determining a verification message based on said comparing the first set of execution parameter values with the second set of execution parameter values; and

sending the verification message to a secure computing platform.

15. The target instance of the computing platform of claim 14 , wherein the method further comprises:

receiving instructions from the secure computing platform in response to the verification message; and

performing an action at the target instance of the computing platform based on the received instructions.

16. The target instance of the computing platform of claim 15 , wherein the action is resetting the target instance of the computing platform to a secure state.

17. The target instance of the computing platform of claim 15 , wherein the action is activating software code that was embedded in the software image.

18. The target instance of the computing platform of claim 13 , wherein at least one execution parameter is one of: total cycles, absolute starting time, absolute ending time, Global Positioning System (GPS) parameters, or a number of instructions that were executed.

Continuity (6)
Continuation 16224545 · Dec 18, 2018
Continuation 15831233 · Dec 4, 2017
Continuation In Part 15357852 · Nov 21, 2016
Continuation 15087822 · Mar 31, 2016
Provisional Application 62511867 · May 26, 2017
Provisional Application 62283240 · Aug 26, 2015
Cited By (1)
US 12,524,552