US 10,482,238 B2 · Method and device for verifying the integrity of platform software of an electronic device

Abstract

A method for verifying the integrity of platform software of an electronic device is provided, the method comprising accessing a module of said platform software, obtaining a signature (S), obtaining a verification key (VK), said verification key (VK) corresponding to a signing key (SK), verifying if said signature (S) was derived by signing said platform software module with said signing key (SK), by using said verification key (VK), and establishing a positive verification of said platform software module if said verification is successful. The invention also provides a method for providing a platform software module to perform the aforementioned method, and a device on which the aforementioned method can be performed.

Claims22

Dependent claims

A method for verifying integrity of software in an electronic device, the electronic device including platform software comprising a platform software module and a monitor module, the method comprising:

accessing the monitor module;
performing a hash function on the monitor module to derive a first computed hash;
obtaining a first expected hash associated with the monitor module;
determining whether the first computed hash matches the first expected hash;
invoking the monitor module at least based on a determination that the first computed hash matches the first expected hash;
and
performing, by the invoked monitor module, an integrity verification procedure on the platform software module.

4 more elements

An electronic device, comprising:

platform software comprising a platform software module and a monitor module;
and
software configured to verify the monitor module by a plurality of operations comprising:
accessing the monitor module;
performing a hash function on the monitor module to derive a first computed hash;
obtaining a first expected hash associated with the monitor module;
determining whether the first computed hash matches the first expected hash;
and
invoking the monitor module at least based on a determination that the first computed hash matches the first expected hash;
wherein the monitor module, responsive to invoking by the software, is configured to perform an integrity verification procedure on the platform software module.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application

15/847,284Filed 19 Dec 2017 · continuation

Priority

30 Sep 2014

Published

US 2018/0253546 A16 Sep 2018

Granted

19 Nov 2019

Term ends

Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/51
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: at application…
H04L 9/3242
Using cryptographic hash functions: involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
H04L 9/3247
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
H04L 63/12
Network architectures or network communication protocols for network security: applying verification of the received information

Family

PCT/IB2004/003805Parent of this continuation · filed 22 Nov 2004

Application14/503,264Parent of this continuation · filed 30 Sep 2014

US 8,954,738 B2Parent of this continuation · filed 10 Feb 2015

Application15/237,871Parent of this continuation · filed 16 Aug 2016

US 9,438,608 B2Parent of this continuation · filed 6 Sep 2016

US 2018/0253546 A1Pre-grant publication · published 6 Sep 2018

US 9,881,150 B2Parent of this continuation

Application11/791,285Parent of this continuation

US 2008/0267406 A1Published application

US 2015/0019872 A1Published application

US 2017/0091443 A1Published application

US 10,482,238 B2This patent

From the US filing history. Foreign family members aren’t listed.

Method and device for verifying the integrity of platform software of an electronic device

Life of this patent

Method and device for verifying the integrity of platform software of an electronic device

Life of this patent

Abstract

Claims22