Integrity verification of an entity
AssigneeHewlett Packard Enterprise Development LP
InventorsLudovic Emmanuel Paul Noel Jacquin, Hamza Attak, Nigel Edwards, Guilherme de Campos Magalhaes
Life of this patent
Estimating the term…
Abstract
Examples relate to integrity reports. In an implementation, an entity for executing a function is launched, the entity operating one or more files for executing the function. In response to the entity being launched, an entity image integrity report is generated comprising, for one or more files operated by the entity, a reference to the file measurement in a first integrity report the first integrity report containing measurements of a plurality of files operable in one or more entities. Alternatively, in response to the entity being launched, an entity integrity report is generated comprising a file measurement for each of the files operated by the entity.
Claims19
A non-transitory machine-readable storage medium storing instructions for integrity verification of an entity grouping a set of processes that, if executed by a physical processing element of a device, cause the device to:
- launch the entity for executing a function, the entity operating one or more files of a plurality of files, for executing the function;
- in response to launching the entity, to generate an entity image integrity report comprising, for the one or more files operated by the entity, a reference pointing to an entry in a first integrity report separate from the entity image integrity report,
- wherein the entry is a file measurement,
- wherein the first integrity report contains measurements of the plurality of files operable in one or more entities, wherein the measurements include one-way hash of a state of the one or more files;
- and
- verify the entity by comparing the entity image integrity report with one-way hashes of a predefined selection of files associated with execution of the function associated with the entity,
- wherein in response to the files referenced in the entity image integrity report matching a set of the predefined selection of files the entity is verified.
A non-transitory machine-readable storage medium storing instructions for integrity verification of an entity grouping a set of processes that, if executed by a physical processing element of a device, cause the device to:
- launch the entity for executing a function, the entity operating one or more files of a plurality of files, for executing the function;
- in response to launching the entity, to generate an entity integrity report corresponding to the launched entity, the entity integrity report comprising a file measurement for each of the one or more files of the plurality of files operated by the entity, wherein each file measurement includes a one-way hash of a state of the one or more files;
- further store file measurements comprised in the entity integrity report in a second integrity report along with file measurements in respect of files operated by other entities;
- and
- verify the entity by comparing the entity image integrity report with one-way hashes of a predefined selection of files associated with execution of the function associated with the entity,
- wherein in response to the files referenced in the entity image integrity report matching a set of the predefined selection of files the entity is verified.
A method for integrity verification of an entity grouping a set of processes, the method comprising:
- launching the entity for executing a function, the entity operating one or more files of a plurality of files, for executing the function;
- in response to launching the entity:
- generating an entity image integrity report comprising, for the one or more files operated by the entity, a reference pointing to an entry in a first integrity report separate from the entity image integrity report,
- wherein the entry is a file measurement,
- wherein the first integrity report contains measurements of the plurality of files operable in one or more entities, wherein the measurements include one-way hash of a state of the one or more files;
- verifying the entity by comparing the entity image integrity report with one-way hashes of a predefined selection of files in order to execute the function associated with the entity,
- wherein in response to the files referenced in the entity image integrity report matching a set of the predefined selection of files the entity is verified.
Dependencies are inferred from the claim text.