Back to results
US 8,806,220 B2Granted
Device side host integrity validation
AssigneeMicrosoft Corporation
InventorsDavid Abzarian, Todd L. Carpenter, Harish S. Kulkarni, Salahuddin J. Khan
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeMicrosoft Corporation
InventorsDavid Abzarian, Todd L. Carpenter, Harish S. Kulkarni, Salahuddin J. Khan
Estimating the term…
Described is a technology by which a transient storage device or secure execution environment-based (e.g., including an embedded processor) device validates a host computer system. The device compares hashes of host system data against valid hashes maintained in protected storage of the device. The host data may be a file, data block, and/or memory contents. The device takes action when the host system data does not match the information in protected storage, such as to log information about the mismatch and/or provide an indication of validation failure, e.g., via an LED and/or display screen output. Further, the comparison may be part of a boot process validation, and the action may prevent the boot process from continuing, or replace an invalid file. Alternatively, the validation may take place at anytime.
In a computing environment, a method comprising, operating a device coupled to a host computing system, including accessing host system data of a host storage device residing in the host computing system, comparing the host system data with information in protected storage of the device to validate whether the host system data matches the information in the protected storage, the information maintained in the protected storage comprising corresponding hash values representative of what contents the host system data contains when valid, and taking action, including changing the host system data, if the host system data does not match the information in protected storage.
In a computing environment, a system comprising, a device that validates a host system, the device including a protected storage that maintains hash values corresponding to host system data, logic for accessing the host system data that resides in the host system, determining whether the host system data matches the corresponding hash values representative of what contents the host system data contains when valid, and if not, for taking an action to change the host system data to match the corresponding hash values.
One or more computer-readable storage media having computer-executable instructions stored thereon, which when executed in response to execution by a computer, cause the computer to perform steps, comprising:
Dependencies are inferred from the claim text.