Back to results
US 8,145,917 B2Granted
Security bootstrapping for distributed architecture devices
AssigneeNokia Corporation
InventorHeikki Waris
Life of this patent
Estimating the term…
Abstract
Securing the boot phase of a computing system implemented as a distributed architecture device can be performed by a system or method that uses hash functions and public key infrastructure (PKI) to verify the authenticity of modular subsystems. The modular subsystems can verify each other's authenticity, and can prevent unauthorized components from being inserted into the system when the system is without power.
Claims21
A method comprising:
- providing a public key infrastructure key to each of a plurality of subsystems of a modular device;
- providing a hashing mechanism to each of the plurality of subsystems of the modular device;
- and
- verifying, by the plurality of subsystems of the modular device, the authenticity of the plurality of subsystems during boot-up using the public key infrastructure key and the hashing mechanism, wherein the plurality of subsystems of the modular device comprise a connectivity subsystem, an application subsystem, and an internal storage subsystem, and wherein the connectivity subsystem, the application subsystem, and the internal storage subsystem are internal to the modular device, wherein the connectivity subsystem comprises a single security manager configured to authorize the plurality of subsystems and configured to send at least one of a plurality of advertisement messages for authorizing at least one of the plurality of subsystems, an application subsystem configured to forward the at least one of a plurality of advertisement messages to another of the plurality of subsystems, and an internal storage subsystem configured to receive the forwarded at least one of the plurality of advertisement messages, wherein the plurality of advertisement messages include a public key and a certificate.
1 more element
An apparatus comprising:
- at least one processor;
- and
- at least one memory including code which when executed by the at least one processor provides at least:
- a management module comprising a single security manager configured to authorize a plurality of subsystems and configured to send at least one of a plurality of advertisement messages to authorize at least one of the plurality of subsystems;
- and
- a first non-management module coupled to the management module, wherein the first non-management module comprises an application subsystem configured to forward the at least one of a plurality of advertisement messages;
- a second non-management module coupled to the first management module, wherein the second management module comprises an internal storage subsystem and is configured to receive the forwarded at least one of a plurality of advertisement messages;
- wherein the management module, the first non-management module, and the second non-management module each comprise a public key infrastructure key and a hashing mechanism,
- wherein the management module, the first non-management module, and the second non-management module are configured to verify one another's authenticity.
6 more elements
A method comprising:
- identifying, by a single security manager, whether links to a subsystem of a secure device are trusted or untrusted, wherein the single security manager is configured to authorize other subsystems and configured to send at least one of a plurality of advertisement messages to authorize the other subsystems;
- and
- calculating a first hash of a software of the subsystem;
- calculating a second hash from a certificate and a public key;
- comparing the first hash and the second hash, and if the hash indicates that the software and the certificate are authentic, authorizing the software and the certificate;
- and
- authenticating, by the single security manager, the other subsystems of the secure device, wherein each of the subsystems include a public key infrastructure key and a hashing mechanism to enable the authenticating, wherein the authenticating comprises:
- providing a signed security manager advertisement message,
- awaiting a responsive subsystem challenge message, providing a subsystem response message in response to the subsystem challenge message,
- awaiting an appropriately signed subsystem advertisement message, and providing resource manager configuration information to the other subsystems.
7 more elements
A method comprising:
- authorizing, by a management module comprising a single security manager, a plurality of subsystems;
- sending, by the management module, at least one of a plurality of advertisement messages to authorize at least one of the plurality of subsystems;
- forwarding, by a first non-management module coupled to the management module, at least one of a plurality of advertisement messages, wherein the first non-management module comprises an application subsystem;
- receiving, at a second non-management module coupled to the first management module, the forwarded at least one of a plurality of advertisement messages, wherein the second management module comprises an internal storage subsystem;
- wherein the management module, the first non-management module, and the second non-management module each comprise a public key infrastructure key and a hashing mechanism,
- wherein the management module, the first non-management module, and the second non-management module are configured to verify one another's authenticity.
3 more elements
An apparatus comprising:
- a single security manager configured to identify whether links to a subsystem of a secure device are trusted or untrusted, wherein the single security manager is configured to authorize other subsystems and configured to send at least one of a plurality of advertisement messages to authorize the other subsystems, wherein the single security manager is further configured to calculate a first hash of a software of the subsystem, calculate a second hash from a certificate and a public key, compare the first hash and the second hash, and if the hash indicates that the software and the certificate are authentic, and authorize the software and the certificate, wherein the single security manager is further configured to authenticate the other subsystems of the secure device, wherein each of the subsystems include a public key infrastructure key and a hashing mechanism to enable the authenticating, wherein the authenticating comprises:
- providing a signed security manager advertisement message,
- awaiting a responsive subsystem challenge message, providing a subsystem response message in response to the subsystem challenge message,
- awaiting an appropriately signed subsystem advertisement message, and providing resource manager configuration information to the other subsystems.
1 more element
Dependencies are inferred from the claim text.