公开(公告)号：US10242197B2

公开(公告)日：2019-03-26

申请号：US15273997

申请日：2016-09-23

Applicant: Intel Corporation

Inventor： Justyna Zander ,  Marek Zmuda ,  Igor A. Tatourian ,  Pawel Szymanski

IPC: H04L29/06 ,  G06F21/57

Abstract: A data processing system (DPS) provides protection for firmware. The DPS comprises (a) a host module comprising a management engine and (b) a security module in communication with the host module. The security module comprises a security coprocessor and a secret identifier for the security module. The DPS also comprises at least one machine-accessible medium comprising host firmware and security firmware. The host firmware, when executed by the management engine, enables to management engine to determine whether the security module is in communication with the host module, based on the secret identifier for the security module. The security firmware, when executed by the security coprocessor, enables the security coprocessor (a) to verify integrity of the host firmware and (b) to prevent the host module from booting with the host firmware in response to a determination that the host firmware has lost integrity. Other embodiments are described and claimed.