Back to results
US 10,769,269 B2Granted
Method and apparatus to gather platform configuration profile in a trustworthy manner
AssigneeIntel Corporation
InventorKirk D. Brannock
Life of this patent
Estimating the term…
Abstract
Various embodiments are generally directed to an apparatus, method and other techniques for gathering configuration information of a computer system during a system management mode of the computer system and exposing the gathered configuration information to securely attest to the configuration of the system.
Claims18
An apparatus, comprising:
- memory;
- and
- logic, at least a portion of which is implemented in processing circuitry coupled to the memory, the logic to:
- store, responsive to a system management interrupt (SMI), an indication of the SMI in the memory;
- store a dynamically signed portion of a system management mode (SMM) called by the SMI in the memory;
- initialize at least one configuration register;
- add a hash of the dynamically signed portion of the SMM to a one of the at least one configuration registers;
- update an event log with an indication that the hash of the dynamically signed portion of the SMM has been added to the one of the at least one configuration registers;
- load instructions corresponding to the SMM into the memory;
- derive a hash of the instructions corresponding to the SMM loaded into the memory;
- and
- verify the SMM based at least in part on the derived hash and the hash of the dynamically signed portion of the SMM in the one of the at least one configuration registers to attest to an authenticity of the SMM.
9 more elements
A method, comprising:
- storing, via a processing circuit responsive to a system management interrupt (SMI) asserted against the processing circuit, an indication of the SMI in memory of a computing platform;
- storing a dynamically signed portion of a system management mode (SMM) called by the SMI in the memory;
- initializing at least one configuration register of the computing platform;
- adding a hash of the dynamically signed portion of the SMM to a one of the at least one configuration registers;
- updating an event log with an indication that the hash of the dynamically signed portion of the SMM has been added to the one of the at least one configuration registers;
- loading instructions corresponding to the SMM into the memory;
- deriving a hash of the instructions corresponding to the SMM loaded into the memory;
- and
- verifying the SMM based at least in part on the derived hash and the hash of the dynamically signed portion of the SMM in the one of the at least one configuration registers to attest to an authenticity of a system management mode (SMM) called by the SMI.
6 more elements
At least one non-transitory machine-readable storage medium comprising instructions that when executed by a processor at a computing platform, cause the processor to:
- store, responsive to a system management interrupt (SMI) asserted against the processor, an indication of the SMI in memory of the computing platform;
- store a dynamically signed portion of a system management mode (SMM) called by the SMI in the memory;
- initialize at least one configuration register of the computing platform;
- add a hash of the dynamically signed portion of the SMM to a one of the at least one configuration registers;
- update an event log with an indication that the hash of the dynamically signed portion of the SMM has been added to the one of the at least one configuration registers;
- load instructions corresponding to the SMM into the memory;
- derive a hash of the instructions corresponding to the SMM loaded into the memory;
- and
- verify the SMM based at least in part on the derived hash and the hash of the dynamically signed portion of the SMM in the one of the at least one configuration registers to attest to an authenticity of a system management mode (SMM) called by the SMI.
6 more elements
Dependencies are inferred from the claim text.