System and method for checking authorization of remote configuration operations
AssigneeIntel Corporation
InventorPaul Drews
Life of this patent
Estimating the term…
Abstract
The present invention provides a system and method for checking authorization of remote configuration operations. The method comprises generating a request credential manifest to request an update of configurable parameters on a client platform. Furthermore, the method comprises signing the request credential manifest with a manifest digital signature, which was generated using a private key in a cryptographic key pair. In addition, the method further comprises verifying the manifest digital signature using a public key to ascertain that the request credential manifest was generated by an authorized console platform.
Claims20
A system to verify authorization of requests to perform configuration operations, the system comprising:
- a cryptographic key pair including a public key and a private key;
- a console platform to generate a request credential manifest to request an update of configurable parameters, the request credential manifest comprises a manifest digital signature created using the private key and an update token that comprises a hash value for a combination of a first globally-unique identifier (GUID), a current value of an instance counter, and a configurable parameters set GUID;
- and
- a client platform to verify the manifest digital signature using the public key to ascertain that the console platform has proper authority to request the update of the configurable parameters.
A console platform to generate requests to perform configuration operations, the console platform comprising:
- a private key belonging to a cryptographic key pair;
- and
- a message generator to create a request credential manifest to update configurable parameters on a client platform, the request credential manifest comprises a manifest digital signature created using the private key and an update token that comprises a hash value for a combination of a client platform globally-unique identifier (GUID), a current value of an instance counter, and a configurable parameters set GUID.
A client platform to verify authorization of requests to perform configuration operations, the client platform comprising:
- a memory to store a public key belonging to a cryptographic key pair and an update token being a hash value for a combination of a client platform globally-unique identifier (GUID), a current value of an instance counter, and a configurable parameters set GUID;
- and
- a processing unit to verify a manifest digital signature in a request credential manifest using the public key to ascertain that the request credential manifest was generated by an authorized source.
A method verify authorization of requests to perform configuration operations, comprising:
- generating a request credential manifest to request an update configurable parameters on a client platform by generating an update token including a hash value for a combination of a client platform globally-unique identifier (GUID), a current value of an instance counter, and a configurable parameters set GUID;
- signing the request credential manifest with a manifest digital signature generated using a private key;
- and
- verifying the manifest digital signature using a public key to ascertain that the request credential manifest was generated by an authorized console platform.
A method to verify authorization of requests to perform configuration operations, comprising:
- generating a request credential manifest by (i) constructing an abstract message from an update token, a list of configurable parameters to be updated, and a list of new values for those configurable parameters, (ii) computing a hash value for the abstract messages and, (iii) encrypting the hash value using a private key to generate the manifest digital signature;
- signing the request credential manifest with a manifest digital signature generated using a private key;
- and
- verifying the manifest digital signature using a public key to ascertain that the request credential manifest was generated by an authorized console platform.
A computer program embodied on a computer-readably medium to verify authorization of requests to perform configuration operations, comprising:
- a cryptographic key pair including a private key and a public key;
- a message generator to create a request credential manifest to update configurable parameters on a client platform, the request credential manifest including a manifest digital signature created using the private key and an update token that comprises a hash value for a combination of a client platform globally-unique identifier (GUID), a current value of an instance counter, and a configurable parameters set GUID;
- and
- a message processing unit to verify the manifest digital signature using the public key to ascertain that the request credential manifest was generated by an authorized console platform.
Dependencies are inferred from the claim text.