Integrity verification for a software stack or part of a software stack
AssigneeHewlett Packard Enterprise Development LP
InventorsSidnei Roberto Selzler Franco, Ludovic Emmanuel Paul No Jacquin, Jonathan Meller, Guilherme De Campos Magalhaes
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to a method for integrity verification of a software stack or part of a software stack resident on a host machine. A management entity generates a measurement log for a disk image associated with the software stack or the part of a software stack. A verifier entity retrieves the generated measurement log and compares the generated measurement log with a reference measurement of a verification profile previously assigned by the verifier entity to the software stack or the part of a software stack to verify the software stack or the part of a software stack.
Claims20
A method for integrity verification of a software stack or part of a software stack resident on a host machine, the method comprising:
- at a management entity:
- generating a measurement log for a disk image associated with the software stack or the part of a software stack;
- and
- at a verifier entity:
- retrieving the generated measurement log;
- and
- comparing the generated measurement log with a reference measurement of a verification profile previously assigned by the verifier entity to the software stack or the part of a software stack to verify the software stack or the part of a software stack.
A system comprising:
- a plurality of host machines, each host machine hosting a software stack;
- a management entity;
- and
- a verifier entity, wherein the verifier entity is to:
- assign each software stack or part of a software stack of each host machine to a verification profile, wherein the verification profile indicates one or more reference measurements for that software stack or part of a software stack;
- request verification of a software stack or part of a software stack of a host machine of the plurality of host machines to the management entity of that host machine;
- and
- compare a verification log generated by the management entity to one or more reference measurements of the verification profile to verify the software stack or the part of a software stack;
- wherein the management entity is to:
- generate a measurement log for that software stack or part of a software stack.
A non-transitory computer readable storage medium having stored thereon instructions which, when executed by a processing resource, cause the processing resource to:
- generate a measurement log for a disk image associated with a software stack or part of a software stack;
- and
- make the measurement log available to a verifier entity for comparing the generated measurement log with a reference measurement of a verification profile previously assigned by the verifier entity to the software stack or the part of a software stack to verify the software stack or the part of a software stack.
Dependencies are inferred from the claim text.