US 2008/0083039 A1 · METHOD FOR INTEGRITY ATTESTATION OF A COMPUTING PLATFORM HIDING ITS CONFIGURATION INFORMATION

Abstract

A method for providing integrity attestation while hiding configuration information is provided. At an integrity attestation target system, the method comprises: creating a measurement value by measuring a component related to an event whenever an event influencing the integrity occurs while the computing platform is driven; hiding information which components are related to the created measurement value; recording the hidden measurement value at a PCR with a measurement list including information about all measurement values measured after the platform is driven; receiving an integrity attestation request transferred from an external system; composing data including the hidden measurement value and information for confirming whether the hidden measurement value is created from integrity sustained components; and transmitting the data to the integrity attestation request external system.

Claims20

Dependent claims

A method for attesting integrity while hiding configuration information of a computing platform at an integrity attestation target system, the method comprising:

creating a measurement value by measuring a component related to an event whenever an event influencing the integrity occurs while the computing platform is driven;
hiding information which components are related to the created measurement value;
recording the hidden measurement value at a PCR (platform configuration register) with a measurement list including information about all measurement values measured after the platform is driven;
receiving an integrity attestation request transferred from an external system;
composing data including the hidden measurement value and information for confirming whether the hidden measurement value is created from integrity sustained components;
and
transmitting the data to the integrity attestation request external system.

4 more elements

A method for attesting integrity while hiding configuration information of a computing platform at a verification system, comprising:

storing information about integrity verified components previously;
transmitting an integrity attestation request to a target system for confirming the integrity thereof;
receiving a response including a hidden measurement value from the target system;
verifying whether the hidden measurement value is created from an integrity sustained component of not by comparing the previously stored information and the hidden measurement value;
and
creating certification data certifying that the integrity of the target system is sustained if the verification is success, and providing the created certification data.

3 more elements

Dependencies are inferred from the claim text.

Method for integrity attestation of a computing platform hiding its configuration information

Life of this patent

Method for integrity attestation of a computing platform hiding its configuration information

Life of this patent

Abstract

Claims20