System and method for end-to-end data trust management with real-time attestation
AssigneeWeeve.Network
InventorsMarcus Jones, Michael-Maria Bommer
Life of this patent
Estimating the term…
Abstract
A system and method for real-time attestation which attests to the untouchability of processors from external influences. The system and method comprise a security mechanism that extracts information about a program's full-control execution path and then validates that information with a highly isolated guard process during runtime, which is running in a trusted environment. This trusted guard application also acts as a remote attester client and sends the currently running control flow graph to a remote attestator server on demand.
Claims20
A system for end-to-end data trust management with real-time attestation, comprising:
- a database, wherein the database comprises a plurality of verified control flow hash values;
- a first networked computing device comprising a firmware memory, a processor, and an instrumented firmware stored in the firmware memory and operable on the processor, the instrumented firmware comprising a first plurality of programming instructions that, when operating on the processor, causes the first networked computing device to:
- create a compartmentalized normal operating environment;
- create a compartmentalized high-privileged operating environment;
- create a golden hash value from a set of instructions running in the normal operating environment on the processor of the networked computing device;
- and
- send the golden hash value to a trusted guard application;
- wherein the trusted guard application is executed in the high-privileged operating environment of the first networked computing device;
- wherein the trusted guard application:
- prepares a device-specific cryptographically-signed authenticated message with the golden hash value;
- and
- sends the device-specific cryptographically-signed authenticated message to a remote attestation server;
- and
- the remote attestation server comprising at least a second plurality of programming instructions stored in a memory of, and operating on at least one processor of, a second networked computing device, wherein the second plurality of programming instructions, when operating on the at least one processor, causes the second networked computing device to:
- receive the golden hash value from the first networked computing device via the device-specific cryptographically-signed authenticated message;
- and
- validate the integrity of the golden hash against at least one of the plurality of verified control flow hash values stored in the database.
A method for end-to-end data trust management with real-time attestation, comprising the steps of:
- storing a plurality of verified control flow hash values in a database;
- in a networked computing device comprising a firmware memory, a processor, and an instrumented firmware stored in the firmware memory and operable on the processor:
- creating a compartmentalized normal operating environment on the processor;
- creating a compartmentalized high-privileged operating environment on the processor;
- creating a golden hash value from a set of instructions running in the normal operating environment on the processor;
- and
- sending the golden hash value to a trusted guard application running in the high-privileged operating environment of the processor;
- in the trusted guard application:
- preparing a device-specific cryptographically-signed authenticated message with the golden hash value;
- sending the device-specific cryptographically-signed authenticated message to a remote attestation server;
- and
- validating, at the remote attestation server, the integrity of the golden hash value against at least one of the plurality of verified control flow hash values stored in the database.
Dependencies are inferred from the claim text.