Systems and methods for detecting and deterring rollback attacks
AssigneeIntel Corporation
InventorsKeith L. Shippy, Richard P. Mangold
Life of this patent
Estimating the term…
Abstract
A log of access to protected content is kept that has forced periodic updates, even if no access has occurred. Systems and methods make it difficult to determine when the access log will be modified next. A server securely sends a variable time period (VTP) and a time duration to the next connection (TDNC) to a client. These two values determine how often the client must update the access log and how long the client must wait before establishing communication with the server. Thus, the server is able to detect and deter rollback attacks.
Claims33
A system for detecting and deterring rollback attacks, comprising:
- a variable time period (VTP);
- a time duration to a next connection (TDNC);
- an access log;
- a server to transmit the variable time period (VTP) and the time duration to the next connection (TDNC) and to verify the access log;
- and
- a client to update the access log approximately every variable time period (VTP) and to connect to the server approximately after the time duration to the next connection (TDNC).
A method for detecting and deterring rollback attacks, comprising:
- establishing a shared secret between a client and a server;
- transmitting, by the server to the client, a variable time period (VTP) and a time duration to a next connection (TDNC);
- updating, by the client, an access log approximately every variable time period (VTP);
- initiating, by the client to the server, a connection approximately after the time duration to the next connection (TDNC);
- transmitting, by the client to the server, the access log;
- and
- verifying, by the server, the access log.
A machine for detecting and deterring rollback attacks, comprising:
- a processor;
- a storage device coupled to the processor;
- a background component storable on the storage device and executable on the processor to update an access log approximately every variable time period (VTP);
- and
- a content player component storable on the storage device and executable on the processor to update the access log to indicate content provided.
A machine-accessible medium having associated content capable of directing the machine to perform a method of detecting and deterring rollback attacks, the method comprising:
- transmitting, by a server, a new access log;
- and
- transmitting, by the server, a new variable time period (VTP) and a new time duration to the next connection (TDNC).
Dependencies are inferred from the claim text.