Firmware Interface Runtime Environment Protection Field
AssigneeIntel Corporation
InventorsLechong Chen, Bin Xing, Feng Jin
Life of this patent
Estimating the term…
Abstract
Method and apparatus for protecting a firmware runtime environment are described herein. In one embodiment, a process example is provided to retrieve a first key from a secure store of a firmware within a platform, the firmware including an initialization table for initializing the platform, and verify the initialization table using the first key retrieved from the secure store during an initialization of the platform. Other methods and apparatuses are also described.
Claims30
A method, comprising:
- retrieving a first key from a secure store associated with a firmware within a platform, the firmware including an initialization table for initializing the platform;
- and
- verifying the initialization table using the first key retrieved from the secure store during an initialization of the platform.
A machine-readable medium having executable code to cause a machine to perform a method, the method comprising:
- retrieving a first key from a secure store of a firmware within a platform, the firmware including an initialization table for initializing the platform;
- and
- verifying the initialization table using the first key retrieved from the secure store during an initialization of the platform.
A data processing system, comprising:
- a processor;
- a memory coupled to the processor to store an initialization table for initializing the data processing system, the memory including a secure store;
- and
- a process, when executed from the memory, causes the processor to retrieve a first key from the secure store, and
- verify the initialization table using the first key retrieved from the secure store during an initialization of the data processing system.
A method, comprising:
- generating a first key to sign an initialization table of a firmware in a platform, the initialization table being used to initialize the platform;
- signing the initialization table using the first key;
- storing the first key in a secure store of the firmware;
- and
- locking the secure store after the first key is stored in the secure store.
A machine-readable medium having executable code to cause a machine to perform a method, the method comprising:
- generating a first key to sign an initialization table of a firmware in a platform, the initialization table being used to initialize the platform;
- signing the initialization table using the first key;
- storing the first key in a secure store of the firmware;
- and
- locking the secure store after the first key is stored in the secure store.
A data processing system, comprising:
- a processor;
- a memory coupled to the processor to store an initialization table for initializing the data processing system, the memory including a secure store;
- and
- a process, when executed from the memory, causes the processor to
- generate a first key to sign the initialization table,
- sign the initialization table using the first key,
- store the first key in the secure store, and
- lock the secure store after the first key is stored in the secure store.
An apparatus, comprising:
- an initialization engine to carry out operations of an initialization table for initializing a platform;
- a secure store to perform one or more keys for signing at least a portion of the initialization table;
- and
- a verifier coupled to the initialization engine and the secure store to verify at least a portion of the initialization table using at least one of the one or more keys during an initialization of the platform.
Dependencies are inferred from the claim text.