Secure boot orchestration device in a virtual desktop infrastructure
AssigneeDell Products L.P.
InventorsJohn Bosco Kelly, Ricardo L. Martinez
Life of this patent
Estimating the term…
Abstract
Methods, systems, and computer programs encoded on computer storage medium, for identifying a virtual desktop infrastructure (VDI) that includes a plurality of components; identifying a secure boot state of each of the components; aggregating the secure boot state of each of the components to define an aggregated secure boot state of the VDI; comparing the aggregated secure boot state of the VDI with a secure boot lookup table to identify a measure of trust of the VDI; identifying access control policies for the VDI for the identified measure of trust of the VDI; and enabling access to one or more resources based on the identified access control policies for the VDI.
Claims18
A computer-implemented method, comprising:
- identifying a virtual desktop infrastructure (VDI) that includes a plurality of components and sources of certifications corresponding to the plurality of components;
- identifying a secure boot state of each of the components;
- aggregating the secure boot state of each of the components to define an aggregated secure boot state of the VDI;
- identifying, for each component of the plurality of components, a source of a certification signature corresponding to the secure boot state of the component, the source including a self-signed signature and a known certificate authority;
- identifying, for the aggregated secure boot state, a particular combination of the sources of the certifications corresponding to each of the components defining the secure boot state;
- comparing i) the aggregated secure boot state of the VDI and ii) the particular combination of the sources of the certifications for the aggregated secure boot state with a secure boot lookup table to identify a measure of trust of the VDI;
- identifying access control policies for the VDI for the identified measure of trust of the VDI;
- and enabling access to one or more resources based on the identified access control policies for the VDI.
A system comprising a processor having access to memory media storing instructions executable by the processor to perform operations comprising:
- identifying a virtual desktop infrastructure (VDI) that includes a plurality of components and sources of certifications corresponding to the plurality of components;
- identifying a secure boot state of each of the components;
- aggregating the secure boot state of each of the components to define an aggregated secure boot state of the VDI;
- identifying, for each component of the plurality of components, a source of a certification signature corresponding to the secure boot state of the component, the source including a self-signed signature and a known certificate authority;
- identifying, for the aggregated secure boot state, a particular combination of the sources of the certifications corresponding to each of the components defining the secure boot state;
- comparing i) the aggregated secure boot state of the VDI and ii) the particular combination of the sources of the certifications for the aggregated secure boot state with a secure boot lookup table to identify a measure of trust of the VDI;
- identifying access control policies for the VDI for the identified measure of trust of the VDI;
- and enabling access to one or more resources based on the identified access control policies for the VDI.
A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:
- identifying a virtual desktop infrastructure (VDI) that includes a plurality of components and sources of certifications corresponding to the plurality of components;
- identifying a secure boot state of each of the components;
- aggregating the secure boot state of each of the components to define an aggregated secure boot state of the VDI;
- identifying, for each component of the plurality of components, a source of a certification signature corresponding to the secure boot state of the component, the source including a self-signed signature and a known certificate authority;
- identifying, for the aggregated secure boot state, a particular combination of the sources of the certifications corresponding to each of the components defining the secure boot state;
- comparing i) the aggregated secure boot state of the VDI and ii) the particular combination of the sources of the certifications for the aggregated secure boot state with a secure boot lookup table to identify a measure of trust of the VDI;
- identifying access control policies for the VDI for the identified measure of trust of the VDI;
- and enabling access to one or more resources based on the identified access control policies for the VDI.
Dependencies are inferred from the claim text.