# US 2014/0156981 A1 · Preboot environment with system security check > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0156981 A1 - Document ID: US20140156981A1 - Status: Published application - Kind: A1 - Application number: 13/692,421 - Filed: 2012-12-03 - Published: 2014-06-05 - Earliest claimed: 2012-12-03 - Assignees: Imation Corp. - Applicants: Imation Corp. - Inventors: Laurence Hamid - Web page: https://patentgrep.com/patent/US20140156981A1 ## CPC - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - G06F 9/4416: {Network booting; Remote initial program loading [RIPL]} - G06F 11/1004: {to protect a block of data words, e.g. CRC or checksum (G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00)} - G06F 21/568: {eliminating virus, restoring damaged files} - G06F 21/575: {Secure boot} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - G06F 11/1008: {in individual solid state devices (G06F11/1004 takes precedence)} - G06F 12/0246: {in block erasable memory, e.g. flash memory} - G06F 16/2365: {Ensuring data consistency and integrity} - H04L 63/123: {received data contents, e.g. message integrity} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Booting an operating system that includes a secure preboot environment that performs integrity checks against security threats. A computer system boots to a preboot environment, which performs integrity checks and other anti-malware operations. Once the preboot environment finishes, the system reboots into a regular environment. The preboot environment can reside on a secure portion of a flash memory, with a computer system booting therefrom; or the preboot environment can reside securely in the computer system. The preboot environment includes integrity checks for a regular environment, and anti-malware programming. Once the preboot environment is done, the computer system reboots into a regular environment, such as from the flash memory or on the computer system. The integrity checks confirm that files in the regular environment are unchanged or uninfected. The integrity checks include determining the accuracy of a trusted system configuration on the computer system, such as using a TPM. ## Claims ### Claim 1 A method, including steps of booting an computer system into a secure preboot environment, said preboot environment including instructions directing a processor to perform integrity checks against malware, said preboot environment preventing unauthorized access to said instructions; upon completing said integrity checks, rebooting said computer system into a regular operating environment, said regular operating environment including operating system software for controlling said computer system and for allowing execution of application software. ### Claim 2 (depends on 1) A method as in claim 1, including steps of communicating with a trusted platform module; determining a trust value for said regular operating environment in response to a result of said steps of communicating with a trusted platform module. ### Claim 3 (depends on 1) A method as in claim 1, including steps of communicating with a trusted platform module; determining an accuracy of a trusted system configuration on the computer system in response to a result of said steps of communicating with a trusted platform module. ### Claim 4 (depends on 1) A method as in claim 1, including steps of coupling a flash memory to said computer system; wherein said steps of booting into said secure preboot environment include booting at least in part from a secure portion of said flash memory. ### Claim 5 (depends on 1) A method as in claim 1, including steps of coupling a flash memory to said computer system; wherein said steps of rebooting said computer system into a regular operating environment including rebooting at least in part from a memory coupled to said computer system. ### Claim 6 (depends on 1) A method as in claim 1, including steps of coupling a flash memory to said computer system; wherein said steps of rebooting said computer system into a regular operating environment include rebooting at least in part from a read-write portion of said flash memory. ### Claim 7 (depends on 1) A method as in claim 1, wherein said integrity checks include one or more of: confirming that one or more files in said regular operating environment are unchanged or uninfected, scanning one or more files in said regular operating environment for malware or viruses, removing malware or viruses from one or more files in said regular operating environment. ### Claim 8 (depends on 1) A method as in claim 1, wherein said regular operating environment includes one or more of: a portable operating environment, a regular operating environment on the computer system. ### Claim 9 (depends on 1) A method as in claim 1, wherein said secure preboot environment is maintained at least in part on a removable storage device. ### Claim 10 (depends on 1) A method as in claim 1, wherein said secure preboot environment is maintained at least in part on a secure read-only memory. ### Claim 11 Apparatus including a computer system including a processor, said processor automatically booting into a secure preboot environment upon startup and operating under control thereof, said preboot environment including instructions directing a processor to perform integrity checks against malware, said preboot environment preventing unauthorized access to said instructions; said preboot environment including instructions directing said processor to reboot said computer system into a regular operating environment, said regular operating environment including operating system software for controlling said computer system and for allowing execution of application software. ### Claim 12 (depends on 11) Apparatus as in claim 11, including instructions directing said processor to communicate with a trusted platform module; instructions directing said processor to determine a trust value for said regular operating environment in response to performing said instructions to communicate with said trusted platform module. ### Claim 13 (depends on 11) Apparatus as in claim 11, including instructions directing said processor to communicate with a trusted platform module; instructions directing said processor to determine an accuracy of a trusted system configuration on the computer system in response to performing said instructions to communicate with said trusted platform module. ### Claim 14 (depends on 11) Apparatus as in claim 11, including a flash memory coupled to said computer system; wherein said secure preboot environment is maintained at least in part in a secure portion of said flash memory. ### Claim 15 (depends on 11) Apparatus as in claim 11, including a flash memory coupled to said computer system; wherein said secure preboot environment is maintained at least in part in a secure storage device coupled to said computer system. ### Claim 16 (depends on 11) Apparatus as in claim 11, including a flash memory coupled to said computer system; wherein said regular operating environment is maintained at least in part in a read-write portion of said flash memory. ### Claim 17 (depends on 11) Apparatus as in claim 11, wherein said instructions directing a processor to perform integrity checks include one or more of: instructions directing said processor to confirm that one or more files in said regular operating environment are unchanged or uninfected, instructions directing said processor to scan one or more files in said regular operating environment for malware or viruses, instructions directing said processor to remove malware or viruses from one or more files in said regular operating environment. ### Claim 18 (depends on 11) Apparatus as in claim 11, wherein said regular operating environment includes one or more of: a portable operating environment, a regular operating environment on the computer system.