Integrity values for beginning booting instructions
AssigneeHewlett Packard Enterprise Development LP
InventorsLudovic Emmanuel Paul Noel Jacquin, Thomas M. Laffey, Adrian Shaw
Life of this patent
Estimating the term…
Abstract
Examples described herein include a computing device with a processing resource to execute beginning booting instructions of the computing device. The beginning booting instructions may include a first booting instruction. The computing device also includes an access line to access the first booting instruction, a measuring engine to duplicate the first booting instruction and to generate a first integrity value associated with the first booting instruction, and a measurement register to store the first integrity value. The measuring engine may be operationally screened from the processing resource and the measurement register may be inaccessible to the processing resource.
Claims16
A computing device comprising:
- a processing resource to execute beginning booting instructions of the computing device, wherein the beginning booting instructions comprises a first booting instruction and a second booting instruction;
- an access line to access the first booting instruction;
- a measuring engine to duplicate the first booting instruction and to generate a first integrity value associated with the first booting instruction, wherein the measuring engine is operationally screened from the processing resource and comprised of hardware-based logic components;
- and
- a measurement register to store the first integrity value, wherein the measurement register is inaccessible to the processing resource;
- and
- wherein the measuring engine is to duplicate the second booting instruction, to generate a second integrity value associated with the second booting instruction, and to update the first integrity value with the second integrity value.
A method comprising:
- duplicating, with a hardware-based measuring logic component, beginning booting instructions of a computing device, wherein the beginning booting instructions comprise a number of individual instructions;
- storing in a count register, a value associated with the number of individual instructions;
- generating, with the hardware-based measuring logic component, a cryptographic integrity value associated with the beginning booting instructions;
- storing, in a measurement register, the cryptographic integrity value;
- and
- sending, over a communication interface, the cryptographic integrity value to a verifying computing device.
A slave computing device comprising:
- a processing resource to execute beginning booting instructions of the slave computing device, wherein the beginning booting instructions comprises a number of individual instructions;
- an access line to access the beginning booting instructions;
- a measuring engine to duplicate the beginning booting instructions and to generate a cryptographic integrity value associated with the beginning booting instructions, wherein the measuring engine is operationally screened from the processing resource;
- a measurement register to store the cryptographic integrity value;
- a count register to store a value associated with the number of individual instructions;
- and
- a communication interface to link the measurement register directly to a master computing device, wherein the communication interface is controlled by the master computing device.
Dependencies are inferred from the claim text.