Remotely Establishing Device Platform Integrity

A system to repair a corrupted device in the field by sending the corrupted device a known-good configuration derived from a device in the field comprising:

• a device with application, data encryption, and remote attestation software installed on the device and coupled to the device's hardware and software stack;
• the device coupled to a network;
• a plurality of existing devices which represent the majority of devices configured in a known-good configuration;
• a minority of existing devices representing devices with corrupted, or anomalies in configuration;
• an attestation server with attestation software that provides the instructions to remotely command the device to perform inventory and content scans of the device's hardware and software stack;
• consolidate and secure the results of the inventory and content scan of the device's hardware and software stack;
• store the results in a storage database;
• to use the collected results to determine a statistically known-good configuration for each type of device;
• to compare the results with the statistically known-good configuration for the particular type of device;
• to note any differences in the most recent message digest compared to the determined statistically known-good configuration;
• to send alerts to the device;
• to request a known-good configuration from a device in the plurality of existing devices;
• and to provide the known-good configuration to the device so the device can be reconfigured back to the same configuration as the plurality of existing devices.

A non-transitory computer-readable medium which stores a set of instructions which when executed performs a method for repairing a corrupted device in the field comprising:

• storing, in each attestation server that is in communication with a device via the network, an application configured to effect, by the attestation server,
• gathering inventory and content scans of several devices' hardware and software stack;
• consolidating, encrypting, and storing the results of the inventory and content scans in a storage database for comparison to subsequent results sent by devices;
• determining a statistically known-good configuration for like-type of devices, and identifying and grouping such like-type of devices such that ideally all of the devices of the same type are configured mostly the same and represent the configuration for the plurality of existing devices;
• comparing recent inventory and content scans from a device with the configuration for the plurality of existing devices for the same type of device;
• noting any differences in the recent inventory and content scan from the device compared to the plurality of existing devices;
• sending an alert to the device indicating the device is configured differently than the configuration for the plurality of existing devices;
• requesting a known-good configuration from a device in the plurality of existing devices;
• and
• providing the known-good configuration to the device so the device can be reconfigured back to the same configuration as the plurality of existing devices.