# US 12,111,932 B2 · Secure boot attestation in a cloud platform > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,111,932 B2 - Document ID: US12111932B2 - Status: Granted - Kind: B2 - Application number: 17/812,791 - Filed: 2022-07-15 - Published: 2024-01-18 - Granted: 2024-10-08 - Earliest claimed: 2022-07-15 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Srinivas Giri Raju Gowda; Shyamkumar T. Iyer; Syama Sundar Poluri - Web page: https://patentgrep.com/patent/US12111932B2 ## CPC - G06F 21/575: {Secure boot} - G06F 8/63: {Image based installation; Cloning; Build to order} - H04L 9/3247: {involving digital signatures} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system can receive, in association with a user account, an operating system image that is encrypted with a private key, a manifest generated from a first instance of a manifest generator tool that is configured to identify system provisioning artifacts that is encrypted with the private key, and a public key. The system can install the operating system image on a computing device. The system can generate, with a second instance of the manifest generator tool, a first identification of system provisioning artifacts from the installing of the operating system image. The system can send the first identification of system provisioning artifacts to an attestation service, wherein the attestation service is configured to compare the first identification of system provisioning artifacts with a second identification of system provisioning artifacts received in association with the user account, and send, for access via the user account, an indication of whether the first identification of system provisioning artifacts matches the second identification of system provisioning artifacts. ## Claims ### Claim 1 A system, comprising: a processor; and a memory coupled to the processor, comprising instructions that cause the processor to perform operations comprising: receiving, in association with a user account, an operating system image that is encrypted with a private key, a manifest generated from a first instance of a manifest generator tool that is configured to identify system provisioning artifacts from installing the operating system image that is encrypted with the private key, and a public key that corresponds to the private key; installing the operating system image on a computing device; generating, with a second instance of the manifest generator tool, a first identification of system provisioning artifacts from the installing of the operating system image on the computing device; and sending the first identification of system provisioning artifacts to an attestation service, wherein the attestation service is configured to compare the first identification of system provisioning artifacts with a second identification of system provisioning artifacts received in association with the user account, and send, for access via the user account, an indication of whether the first identification of system provisioning artifacts matches the second identification of system provisioning artifacts. ### Claim 2 (depends on 1) The system of claim 1, wherein the operations further comprise: sending, for access via the user account, the first instance of the manifest generator tool before receiving, in association with the user account, the manifest that is encrypted with the private key. ### Claim 3 (depends on 1) The system of claim 1, wherein the operations further comprise: sending a resource map of available resources on the computing device to the attestation service, wherein the attestation service is configured to use the resource map to validate the computing device. ### Claim 4 (depends on 3) The system of claim 3, wherein the operations further comprise: in response to determining that the resource map has been updated to produce an updated resource map, sending the updated resource map to the attestation service. ### Claim 5 (depends on 1) The system of claim 1, wherein the public key is a key that is configured for secure booting of an operating system that corresponds to the operating system image on the computing device. ### Claim 6 (depends on 1) The system of claim 1, wherein the operations further comprise: registering the operating system image in response to receiving the operating system image in association with the user account. ### Claim 7 (depends on 1) The system of claim 1, wherein the operations further comprise installing the operating system image on the computing device in response to receiving the indication in association with the user account to initiate the installing of the operating system image, wherein the indication is received after receiving the operating system image. ### Claim 8 (depends on 1) The method of claim 1, further comprising: sending, by the system, a resource map of available resources on the computing device to the attestation service, wherein the attestation service is configured to use the resource map to validate the computing device. ### Claim 9 (depends on 8) The method of claim 8, further comprising: in response to determining that the resource map has been updated to produce an updated resource map, sending, by the system, the updated resource map to the attestation service. ### Claim 10 A method, comprising: receiving, by a system comprising a processor, in association with a user account, an operating system image that is encrypted with a private key, a manifest generated from a first instance of a manifest generator tool that is configured to identify system provisioning artifacts from installing the operating system image that is encrypted with the private key, and a public key that corresponds to the private key; installing, by the system, the operating system image on a device; generating, by the system and with a second instance of a manifest generator tool, a first identification of system provisioning artifacts from the installing of the operating system image on the device; and sending, by the system, the first identification of system provisioning artifacts to an attestation service, wherein the attestation service is configured to compare the first identification of system provisioning artifacts with a second identification of system provisioning artifacts received in association with the user account, and send, for access via the user account, an indication of whether the first identification of system provisioning artifacts matches the second identification of system provisioning artifacts. ### Claim 11 (depends on 10) The method of claim 10, wherein installing the operating system image on the device comprises: installing a public key associated with the user account that is received from the device; configuring hardware on the device; and provisioning the operating system image on the device. ### Claim 12 (depends on 10) The method of claim 10, wherein installing the operating system image on the device results in an installed operating system image, wherein the system provisioning artifacts comprises first metadata for the installed operating system image, second metadata for firmware of the device, third metadata for hardware of the device, or fourth metadata for configuration components of the device. ### Claim 13 (depends on 10) The method of claim 10, wherein the system provisioning artifacts identify at least one file that is created from installing the operating system image that is different from a file contained within the operating system image. ### Claim 14 (depends on 10) The method of claim 10, wherein the system provisioning artifacts are based on the operating system image, a hardware configuration of the device, and at least one program installed on the device. ### Claim 15 (depends on 10) The method of claim 10, further comprising: sending, by the system and for access via the user account, the first instance of the manifest generator tool before receiving, in association with the user account, the manifest that is encrypted with the private key. ### Claim 16 A non-transitory computer-readable medium comprising instructions that, in response to execution, cause a system comprising a processor to perform operations, comprising: receiving, as a result of usage of a user account, an operating system image that is encrypted with a private key, a manifest generated from a first instance of a manifest generator tool that is configured to identify system provisioning artifacts from installing the operating system image that is encrypted with the private key, and a public key that corresponds to the private key; installing the operating system image on equipment; generating, with a second instance of the manifest generator tool, a first identification of system provisioning artifacts from installing the operating system image on the equipment; and sending the first identification of system provisioning artifacts to an attestation service, wherein the attestation service is configured to compare the first identification of system provisioning artifacts with a second identification of system provisioning artifacts received in association with the user account, and send, for access via the user account, an indication of whether the first identification of system provisioning artifacts matches the second identification of system provisioning artifacts. ### Claim 17 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein the equipment is first equipment, and wherein the first identification of system provisioning artifacts is determined from second equipment that is controlled via authorized access of the user account. ### Claim 18 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein the first identification of system provisioning artifacts is determined by the attestation service. ### Claim 19 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein the equipment is first equipment, wherein the attestation service is separate from second equipment associated with the user account, and wherein the attestation service is separate from third equipment that performs the installing, the generating, and the sending. ### Claim 20 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein the public key is a key that is configured for secure booting of an operating system that corresponds to the operating system image on the computing device.