Attesting to a value of a register and/or memory region
AssigneeMicrosoft Corporation
InventorsButler W. Lampson, John D. DeTreville, Paul England
Life of this patent
Estimating the term…
Abstract
In accordance with one aspect of attesting to a value of a register and/or memory region, an operating system of a device receives a request, in response to an ATTEST operation being invoked, to make a signed attestation of a value. The operating system signs a statement that includes the value using a private key of a pair of public and private keys of a processor of the device. The value may be stored in a register and/or a region of memory.
Claims33
One or more computer readable memories having stored thereon a plurality of instructions that, when executed by a processor, causes the processor to:
- receive a request to make a signed attestation of a current value of a register;
- and
- return a signed statement of the current value of the register, wherein the statement is signed using a private key of a pair of public and private keys of the processor.
One or more computer readable memories having stored thereon a plurality of instructions that, when executed by a processor, causes the processor to:
- receive a request to make a signed attestation of a current value of a region of memory;
- return a signed statement of the current value of the region of memory, wherein the statement is signed using a private key of a pair of public and private keys of the processor.
A method, implemented by an operating system of a device, the method comprising:
- receiving, in response to an ATTEST operation being invoked, a request to make a signed attestation of a value;
- and
- signing, using a private key of a pair of public and private keys of a processor of the device, a statement including the value.
A system comprising:
- means for receiving, in response to an ATTEST operation being invoked, a request to make a signed attestation of a value;
- and
- means for signing, using a private key of a pair of public and private keys of a processor of the system, a statement including the value.
One or more computer readable memories having stored thereon a plurality of instructions that, when executed by a processor of a device, causes the processor to implement an ATTEST operation that causes the processor to make a signed attestation of a current value of a region of memory or a register, the signed attestation being signed with a private key of a pair of public and private keys of the processor, and the signed attestation including the current value.
One or more computer readable memories having stored thereon a plurality of instructions that, when executed by one or more processors, causes the one or more processors to:
- invoke an attest operation in order to have a signed attestation of a current value of a register made;
- and
- receive, in response to invoking the attest operation, a signed statement of the current value of the register, wherein the statement is signed using a private key of a pair of public and private keys of a processor of a device generating the signed statement.
One or more computer readable memories having stored thereon a plurality of instructions that, when executed by one or more processors, causes the one or more processors to:
- invoke an attest operation in order to have a signed attestation of a current value of a region of memory made;
- and
- receive, in response to invoking the attest operation, a signed statement of the current value of the region of memory, wherein the statement is signed using a private key of a pair of public and private keys of a processor of a device generating the signed statement.
Dependencies are inferred from the claim text.