Authentication of device configurations for authenticated devices
AssigneeFortinet, Inc.
InventorLi Hou
Life of this patent
Estimating the term…
Abstract
Validation of a firmware image on a client device is disclosed. Information corresponding to one or more addresses of an image stored on a client device is periodically requested via an application program interface (API) configured to provide access to the image on the client device. The requested information from the image on the client device is compared with the image stored on the server image with stored validation information corresponding to a valid version of the image. An indication is generated if the information from the image on the client device does not match the stored validation information.
Claims20
A method comprising:
- periodically requesting, with a validation server that is part of an endpoint protection platform, information corresponding to one or more addresses in an image stored on a client device having an endpoint security agent via an application program interface (API) configured to provide access to the image on the client device, wherein the validation server provides a set of new addresses in the image for each new inquiry;
- receiving, with the validation server, the requested information from the client device via the API;
- comparing the requested information from the image on the client device with stored validation information corresponding to a valid version of the image;
- generating an indication that the image on the client device has been modified if the information from the image on the client device does not match the stored validation information.
A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, are configurable to cause the one or more processors to:
- periodically request, with a validation server that is part of an endpoint protection platform, information corresponding to one or more addresses in an image stored on a client device having an endpoint security agent via an application program interface (API) configured to provide access to the image on the client device, wherein the validation server provides a set of new addresses in the image for each new inquiry;
- receive, with the validation server, the requested information from the client device via the API;
- compare the requested information from the image on the client device with stored validation information corresponding to a valid version of the image;
- generate an indication that the image on the client device has been modified if the information from the image on the client device does not match the stored validation information.
A computing device comprising:
- a memory system;
- and
- a processor coupled with the memory system, the processor configurable to:
- periodically request, with a validation server that is part of an endpoint protection platform, information corresponding to one or more addresses in an image stored on a client device having an endpoint security agent via an application program interface (API) configured to provide access to the image on the client device, wherein the validation server provides a set of new addresses in the image for each new inquiry;
- receive, with the validation server, the requested information from the client device via the API;
- compare the requested information from the image on the client device with stored validation information corresponding to a valid version of the image;
- generate an indication that the image on the client device has been modified if the information from the image on the client device does not match the stored validation information.
Dependencies are inferred from the claim text.