# US 2018/0025159 A1 · Integrity values for beginning booting instructions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0025159 A1
- Document ID: US20180025159A1
- Status: Published application
- Kind: A1
- Application number: 15/217,583
- Filed: 2016-07-22
- Published: 2018-01-25
- Earliest claimed: 2016-07-22
- Assignees: Hewlett Packard Enterprise Development LP
- Applicants: Hewlett Packard Enterprise Development LP
- Inventors: Ludovic Emmanuel Paul Noel Jacquin; Thomas M. Laffey; Adrian Shaw
- Web page: https://patentgrep.com/patent/US20180025159A1

## CPC

- G06F 21/575: {Secure boot}
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- G06F 2221/033: Test or assess software
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Examples described herein include a computing device with a processing resource to execute beginning booting instructions of the computing device. The beginning booting instructions may include a first booting instruction. The computing device also includes an access line to access the first booting instruction, a measuring engine to duplicate the first booting instruction and to generate a first integrity value associated with the first booting instruction, and a measurement register to store the first integrity value. The measuring engine may be operationally screened from the processing resource and the measurement register may be inaccessible to the processing resource.

## Claims

### Claim 1

A computing device comprising:
a processing resource to execute beginning booting instructions of the computing device, wherein the beginning booting instructions comprises a first booting instruction;
an access line to access the first booting instruction;
a measuring engine to duplicate the first booting instruction and to generate a first integrity value associated with the first booting instruction, wherein the measuring engine is operationally screened from the processing resource; and
a measurement register to store the first integrity value, wherein the measurement register is inaccessible to the processing resource.

### Claim 2 (depends on 1)

The computing device of claim 1, wherein the measuring engine is comprised of hardware-based logic components.

### Claim 3 (depends on 2)

The computing device of claim 2,
wherein the beginning booting instructions comprises a second booting instruction; and
wherein the measuring engine is to duplicate the second booting instruction, to generate a second integrity value associated with the second booting instruction, and to update the first integrity value with the second integrity value.

### Claim 4 (depends on 3)

The computing device of claim 3, comprising a count register to store a value to represent a number of times the measuring engine generates an integrity value.

### Claim 5 (depends on 3)

The computing device of claim 3, wherein the measuring engine is to determine an end of the beginning booting instructions.

### Claim 6 (depends on 5)

The computing device of claim 5, comprising a communication interface to link the measurement register directly to a host computing device, wherein the communication interface is controlled by the host computing device.

### Claim 7 (depends on 6)

The computing device of claim 6, wherein the communication interface comprises a serial bus.

### Claim 8 (depends on 1)

The computing device of claim 1, comprising an input and output lane connected to the processing resource, wherein the access line is connected to the input and output lane.

### Claim 9 (depends on 1)

The computing device of claim 1, wherein the processing resource comprises a control unit to fetch the first booting instruction from a memory, and wherein the access line is connected to the control unit to access the fetched instruction.

### Claim 10

A method comprising:
duplicating, with a hardware-based measuring logic component, beginning booting instructions of a computing device, wherein the beginning booting instructions comprise a number of individual instructions;
generating, with the hardware-based measuring logic component, a cryptographic integrity value associated with the beginning booting instructions;
storing, in a measurement register, the cryptographic integrity value; and
sending, over a communication interface, the cryptographic integrity value to a verifying computing device.

### Claim 11 (depends on 10)

The method of claim 10, comprising executing, with a processing resource of the computing device, the beginning booting instructions.

### Claim 12 (depends on 11)

The method of claim 11, wherein the hardware-based measuring logic component is undetectable by the processing resource of the computing device.

### Claim 13 (depends on 10)

The method of claim 10, comprising storing, in a count register, a value associated with the number of individual instructions.

### Claim 14 (depends on 10)

The method of claim 10, comprising:
receiving the cryptographic integrity value at the verifying computing device; and
evaluating the cryptographic integrity value at the verifying computing device;
wherein the sending of cryptographic integrity value is direct to the host computing device; and
wherein the communication interface is controlled by the verifying computing device.

### Claim 15

A slave computing device comprising:
a processing resource to execute beginning booting instructions of the slave computing device, wherein the beginning booting instructions comprises a number of individual instructions;
an access line to access the beginning booting instructions;
a measuring engine to duplicate the beginning booting instructions and to generate a cryptographic integrity value associated with the beginning booting instructions, wherein the measuring engine is operationally screened from the processing resource;
a measurement register to store the cryptographic integrity value; and
a communication interface to link the measurement register directly to a master computing device, wherein the communication interface is controlled by the master computing device.

### Claim 16 (depends on 15)

The computing device of claim 15, wherein the measuring engine is comprised of hardware-based logic components.

### Claim 17 (depends on 15)

The computing device of claim 15, comprising a count register to store a value associated with the number of individual instructions.

### Claim 18 (depends on 15)

The computing device of claim 15, comprising an input and output lane connected to the processing resource, wherein the access line is connected to the input and output lane.

### Claim 19 (depends on 15)

The computing device of claim 15, wherein the processing resource comprises a control unit to fetch the beginning booting instructions from a memory, and wherein the access line is connected to the control unit to access the fetched instructions.

### Claim 20 (depends on 15)

The computing device of claim 15, wherein the communication interface comprises a serial bus.
