Threat detection using a measured storage device
AssigneeMicron Technology, Inc.
InventorZhan Liu
Life of this patent
Estimating the term…
Abstract
The disclosed embodiments relate to detecting malicious data and in particular to a method that includes loading data from a storage device; loading secure identifying data (SID) associated with the data from a write-protected region of the storage device, the SID including a digest and at least one metadata field; comparing the at least one metadata field in the SID to a corresponding metadata field of the data; computing a current digest of the data; comparing the current digest to the digest in the SID; and validating the data when the at least one metadata field in the SID matches the corresponding metadata field of the data and the current digest matches the digest in the SID.
Claims20
A method comprising:
- loading data from a storage device;
- loading secure identifying data (SID) associated with the data from a write-protected region of the storage device, the SID including a digest and at least one metadata field;
- comparing the at least one metadata field in the SID to a corresponding metadata field of the data;
- computing a current digest of the data;
- comparing the current digest to the digest in the SID;
- and
- validating the data when the at least one metadata field in the SID matches the corresponding metadata field of the data and the current digest matches the digest in the SID.
A method comprising:
- initializing, by a computing device, at least one measurement location after performing a boot;
- performing, by the computing device, an automatic measurement of L0 code after a reboot;
- computing, by the computing device, a device identifier (DeviceID) based on metadata associated with the L0 code and stored in a write-protected storage device;
- booting, by the computing device, to L1 code;
- and
- computing, by the computing device, at least one alias key for the L1 code, the at least one alias key computed using a component device identifier (CDI) of the L0 code.
A method comprising:
- retrieving metadata associated with executable code, the metadata including measurement data;
- computing a digest for the executable code based on the measurement data;
- generating a component device identifier (CDI) for the executable code using one of a unique device secret (UDS) or second CDI and the digest;
- and
- computing a device identifier using the CDI.
Dependencies are inferred from the claim text.