Back to results
US 11,409,875 B2Granted
Trust in block-chain implementations using compute resource configuration and verification systems and methods
AssigneeCloud Raxak, Inc.
InventorsPrasanna Mulgaonkar, Seshashayee Murthy
Life of this patent
Estimating the term…
Abstract
Systems and methods for compute resource configuration, verification, and remediation are provided herein. An example method includes verifying compliance of an operating system and compute assets provisioned configured within a middleware of a computing device using a pre-defined configuration profile, the compliance being determined by comparison of run-time hardware and software attributes of the compute assets to the pre-defined configuration profile comprising hardware and software requirements for the client of a blockchain implementation.
Claims21
A method for providing tamper proof configurations for run-time compute resources in a server for improving trust in block-chain implementations, the method comprising:
- configuring compute resources for a client of a blockchain implementation, the compute resources comprising a boot-time state that has been verified against a hardware-based measurement stored in a signed datastore;
- utilizing a pre-defined configuration profile for client of the blockchain implementation by the verified compute resources, the pre-defined configuration profile comprising hardware and software requirements for the client of the blockchain implementation;
- verifying, at run time, compliance of a run-time state of the compute resources with the pre-defined configuration profile, by a verification system validating the run-time state that comprises at least one of:
- configuration of an operating system of the compute resources;
- configuration files for a middleware;
- compute assets provisioned by the middleware;
- and
- computational assets executing on the compute assets provisioned by the middleware;
- examining the pre-defined configuration profile for the client of the blockchain implementation;
- validating the pre-defined configuration profile for the client of the blockchain implementation using a hardware root of trust and the examining the pre-defined configuration profile for the client of the blockchain implementation;
- generating a risk score for the client of the blockchain implementation based on the validating the pre-defined configuration profile;
- and
- comparing the risk score for the client of the blockchain implementation to a threshold trust score.
10 more elements
A method, comprising:
- verifying compliance of an operating system and compute assets configured within middleware of a computing device using a pre-defined configuration profile, the compliance being determined by comparison of run-time hardware and software attributes of the compute assets to the pre-defined configuration profile comprising hardware and software requirements for a client of a blockchain implementation;
- examining the pre-defined configuration profile for the client of the blockchain implementation;
- validating the pre-defined configuration profile for the client of the blockchain implementation using a hardware root of trust and the examining the pre-defined configuration profile for the client of the blockchain implementation;
- generating a risk score for the client of the blockchain implementation based on the validating the pre-defined configuration profile;
- and
- comparing the risk score for the client of the blockchain implementation to a threshold trust score.
3 more elements
A system, comprising:
- a cloud comprising:
- middleware comprising an operating system kernel configurations;
- and
- compute resources provisioned by the middleware, the compute resources comprising operating system kernel configurations and boot files;
- a configuration and verification system that generates boot-time profiles of the operating system kernel and the boot files;
- a signed store that stores the boot-time profiles;
- a cloud server that:
- provisions the compute resources;
- compares boot-time attributes of the compute resources to the boot-time profiles in the signed store to determine if the compute resources are verified;
- wherein the configuration and verification system verifies, using hardware-verified compute resources, run-time resources comprising:
- a configuration of an operating system of the compute resources;
- and
- configuration files for the middleware;
- examines the compute resources for a blockchain implementation;
- validates the compute resources for the blockchain implementation using a hardware root of trust and the examining the compute resources;
- generates a risk score for the compute resources for the blockchain implementation based on the validating the compute resources;
- and
- compares the risk score for the compute resources of the blockchain implementation to a threshold trust score.
15 more elements
A method executing during run time of a compute resource in a cloud network for improving trust in block-chain implementations, the method comprising:
- applying a pre-defined run-time configuration profile to hardware verified compute resources provisioned for a client of a blockchain implementation by a hardware verified operating system kernel, the configuration profile comprising hardware and software requirements for the client of the blockchain implementation;
- verifying compliance with the pre-defined run-time configuration profile, by a verification system, validating at least one of:
- configuration of an operating system of the compute resources;
- configuration files for middleware;
- compute assets provisioned by the middleware;
- and
- computational assets executing on the compute assets provisioned by the middleware;
- providing access to the compute resource if compliance is verified and denying access to the compute resource if compliance cannot be verified;
- examining the configuration profile for the client of the blockchain implementation;
- validating the configuration profile for the client of the blockchain implementation using a hardware root of trust and the examining the configuration profile for the client of the blockchain implementation;
- generating a risk score for the client of the blockchain implementation based on the validating the configuration profile;
- and
- comparing the risk score for the client of the blockchain implementation to a threshold trust score.
10 more elements
Dependencies are inferred from the claim text.