TECHNOLOGIES FOR VERIFYING COMPONENTS
    3.
    发明申请
    TECHNOLOGIES FOR VERIFYING COMPONENTS 有权
    验证组件的技术

    公开(公告)号:US20160085995A1

    公开(公告)日:2016-03-24

    申请号:US14493786

    申请日:2014-09-23

    IPC分类号: G06F21/73 G06F21/55

    摘要: Technologies for verifying hardware components of a computing device include retrieving platform identification data of the computing device, wherein the platform identification data is indicative of one or more reference hardware components of the computing device, accessing hardware component identification data from one or more dual-headed identification devices of the computing device, and comparing the platform identification data to the hardware component identification data to determine whether a hardware component of the computing device has been modified. Each of the one or more dual-headed identification devices is secured to a corresponding hardware component of the computing device, includes identification data indicative of an identity of the corresponding hardware component of the computing device, and is capable of wired and wireless communication.

    摘要翻译: 用于验证计算设备的硬件组件的技术包括检索所述计算设备的平台识别数据,其中所述平台标识数据指示所述计算设备的一个或多个参考硬件组件,从一个或多个双头 计算装置的识别装置,以及将平台识别数据与硬件部件识别数据进行比较,以确定计算装置的硬件部件是否已被修改。 一个或多个双头识别装置中的每一个被固定到计算装置的对应的硬件部件,包括指示计算装置的对应硬件部件的身份的识别数据,并且能够进行有线和无线通信。

    Runtime platform firmware verification
    9.
    发明授权
    Runtime platform firmware verification 有权
    运行时平台固件验证

    公开(公告)号:US08590040B2

    公开(公告)日:2013-11-19

    申请号:US12976523

    申请日:2010-12-22

    IPC分类号: G06F21/00

    CPC分类号: G06F21/572

    摘要: Embodiments of the invention are directed towards logic and/or modules stored in processor secure storage to determine whether a first platform firmware image (e.g., basic input/output system (BIOS), device read-only memory (ROM), manageability engine firmware) loaded onto a processor cache is valid. The processor executes the first platform firmware image if it is determined to be valid. If the first platform image is determined to be invalid, a second platform firmware image is located. If this platform firmware image is determined to be valid, the processor will execute said second platform image.In some embodiments of the invention, the determination of whether the first platform firmware image is valid is based, at least in part, on verification of a digital signature associated with the first platform firmware image. The digital signature may be created, for example, from a private key, wherein the digital signature is verified via a public key.

    摘要翻译: 本发明的实施例针对存储在处理器安全存储器中的逻辑和/或模块来确定第一平台固件映像(例如,基本输入/输出系统(BIOS),设备只读存储器(ROM),可管理性引擎固件) 加载到处理器缓存中是有效的。 如果判定为有效,则处理器执行第一平台固件映像。 如果第一平台图像被确定为无效,则定位第二平台固件图像。 如果该平台固件图像被确定为有效,则处理器将执行所述第二平台图像。 在本发明的一些实施例中,确定第一平台固件图像是否有效是至少部分地基于与第一平台固件图像相关联的数字签名的验证。 可以例如从私钥来创建数字签名,其中通过公钥验证数字签名。