Attestation manifest derivation and distribution using software update image
AssigneeIntel Corporation
InventorsNed M. Smith, Kshitij Arun Doshi, John J. Browne, Vincent J. Zimmer, Francesc Guim Bernat, Kapil Sood
Life of this patent
Estimating the term…
Abstract
Various systems and methods for enabling derivation and distribution of an attestation manifest for a software update image are described. In an example, these systems and methods include orchestration functions and communications, providing functionality and components for a software update process which also provides verification and attestation among multiple devices and operators.
Claims20
An orchestration apparatus for attestation manifest derivation and distribution, the orchestration apparatus comprising:
- processing circuitry;
- and
- memory including instructions that, when executed by the processing circuitry, cause the processing circuitry to perform operations to:
- obtain a software update package manifest from an edge device;
- generate a reference integrity measurement manifest that includes at least one integrity measurement for a reference software update package associated with the software update package manifest based on the software update package manifest, wherein the reference integrity measurement manifest includes a hash of the reference software update package;
- initiate an attestation request with the edge device;
- verify the edge device based on the at least one integrity measurement and a result of the attestation request;
- generate a new device cryptographic identity for the edge device upon verification of a signature for a current device cryptographic identity of the edge device and verification that a hash of a software update package received from the edge device matches the hash of the reference software update package included in the reference integrity measurement manifest;
- and
- generate an attestation record for the edge device based on the new device cryptographic identity.
A method for attestation manifest derivation and distribution comprising:
- obtaining a software update package manifest from an edge device;
- generating a reference integrity measurement manifest that includes at least one integrity measurement for a reference software update package associated with the software update package manifest based on the software update package manifest, wherein the reference integrity measurement manifest includes a hash of the reference software update package;
- initiating an attestation request with the edge device;
- verifying the edge device based on the at least one integrity measurement and a result of the attestation request;
- generating a new device cryptographic identity for the edge device upon verification of a signature for a current device cryptographic identity of the edge device and verification that a hash of a software update package received from the edge device matches the hash of the reference software update package included in the reference integrity measurement manifest;
- and
- generating an attestation record for the edge device based on the new device cryptographic identity.
At least one non-transitory machine-readable medium including instructions for attestation manifest derivation and distribution that, when executed by processing circuitry, cause the processing circuitry to perform operations to:
- obtain a software update package manifest from an edge device;
- generate a reference integrity measurement manifest that includes at least one integrity measurement for a reference software update package associated with the software update package manifest based on the software update package manifest, wherein the reference integrity measurement manifest includes a hash of the reference software update package;
- initiate an attestation request with the edge device;
- verify the edge device based on the at least one integrity measurement and a result of the attestation request;
- generate a new device cryptographic identity for the edge device upon verification of a signature for a current device cryptographic identity of the edge device and verification that a hash of a software update package received from the edge device matches the hash of the reference software update package included in the reference integrity measurement manifest;
- and
- generate an attestation record for the edge device based on the new device cryptographic identity.
Dependencies are inferred from the claim text.