IP Library › Granted Patent US 11,416,370
Granted Patent B2
US 11,416,370 · App. 16/832,163 · Granted Aug 16, 2022

Platform measurement collection mechanism

Inventors: Prashant Dewan (Portland, OR); Uttam Sengupta (Portland, OR); Aditya Katragada (Austin, TX)
Assignee: Intel Corporation
G06F11/3414G06F11/3495H04L9/3263H04L67/125
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,416,370
App. No.
16/832,163
Granted
Aug 16, 2022
Kind
B2
Abstract

An apparatus to collect firmware measurement data at a computing system is disclosed. The apparatus includes a plurality of agents, each including a non-volatile memory storing firmware executed to perform a function associated with the agent, verification logic to generate measurement data by verifying the integrity of the firmware and a register to store the measurement data, and a processor to execute an instruction to collect firmware measurement data from each of the plurality of agents.

Claims (41)

1. An apparatus to collect firmware measurement data at a computing system, comprising:

a plurality of interconnect protocol (IP) agents, each including:

a non-volatile memory storing firmware executed to perform a function associated with the agent;

one or more processors to execute verification logic to generate measurement data by verifying the integrity of the firmware via a hash algorithm performed on the firmware; and

a register to store the measurement data; and

a central processing unit (CPU) to execute an instruction to access the register at each IP agent to collect the firmware measurement data from each of the plurality of IP agents; and

an integrated on-chip system fabric coupled between the plurality of IP agents and the CPU.

2. The apparatus of claim 1 , wherein the CPU collecting the firmware measurement data comprises collecting first measurement data from a first set of one or more registers in a first IP agent and collecting second measurement data from a second set of one or more registers in a second IP agent.

3. The apparatus of claim 2 , wherein the CPU receives a manifest data structure from a software application.

4. The apparatus of claim 3 , wherein the CPU inserts the first and second measurement data in the manifest data structure.

5. The apparatus of claim 4 , wherein the CPU signs the manifest data structure with one or more cryptographic keys.

6. The apparatus of claim 5 , wherein the CPU transmits the manifest data to a cloud agent external to the computing system.

7. The apparatus of claim 6 , wherein the IP agent uses the manifest to receive firmware from one or more of the plurality of IP agents.

8. The apparatus of claim 7 , wherein the CPU retrieves the firmware from the one or more of the plurality of IP agents and transmits the firmware to the cloud agent.

9. The apparatus of claim 1 , further comprising an integrated on-chip system fabric coupled between the CPU and each of the plurality of IP agents.

10. At least one computer readable medium having instructions stored thereon, which when executed by one or more processors, cause the processors to:

read a data manifest data structure;

determine a number of agents within a computing system platform;

access a register within each of a plurality of interconnect protocol (IP) agents within the computing system platform to collect firmware measurement data;

insert the collected firmware measurement data within the manifest data structure; and

transmit the manifest data structure for verification.

11. The computer readable medium of claim 10 , wherein the firmware measurement data is collected from a register within each of the plurality of IP agents.

12. The computer readable medium of claim 11 , wherein collecting the firmware measurement data comprises:

collecting first measurement data from a first set of one or more registers in a first IP agent; and

collecting second measurement data from a second set of one or more registers in a second IP agent.

13. The computer readable medium of claim 12 , having instructions stored thereon, which when executed by one or more processors, cause the processors to sign the manifest data structure with one or more cryptographic keys.

14. The computer readable medium of claim 13 , having instructions stored thereon, which when executed by one or more processors, cause the processors to receive a request to receive measurement data from the computing system platform.

15. The computer readable medium of claim 14 , having instructions stored thereon, which when executed by one or more processors, cause the processors to transmit the manifest data to a cloud agent external to the computing system.

16. A method to collect firmware measurement data from aa computing system:

reading a data manifest data structure;

determining a number of agents within a computing system platform;

accessing a register within each of a plurality of interconnect protocol (IP) agents within the computing system platform to collect firmware measurement data;

inserting the collected firmware measurement data within the manifest data structure; and

transmitting the manifest data structure for verification.

17. The method of claim 16 , wherein the firmware measurement data is collected from a register within each of the plurality of IP agents.

18. The method of claim 17 , wherein collecting the firmware measurement data comprises:

collecting first measurement data from a first set of one or more registers in a first IP agent; and

collecting second measurement data from a second set of one or more registers in a second IP agent.

19. The method of claim 18 , further comprising signing the manifest data structure with one or more encryption keys.

20. The method of claim 19 , further comprising receiving a request to receive measurement data from the computing system platform.

21. The method of claim 20 , further comprising transmitting the signed manifest data to a cloud agent external to the computing system.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 22, 2020
From: DEWAN, PRASHANT; SENGUPTA, UTTAM; KATRAGADA, ADITYA
To: INTEL CORPORATION
Reel/Frame 053001/0603 →
Continuity (1)
Related Publication 20200226047A1 · Jul 16, 2020
Cited By (1)
US 12,524,245