Platform based verification of contents of input-output devices
AssigneeIntel Corporation
InventorsHormuzd M. Khosravi, Venkat R. Gokulrangan, Yasser Rasheed, Men Long
Life of this patent
Estimating the term…
Abstract
A platform to support verification of the contents of an input-output device. The platform includes a platform hardware, which may verify the contents of the I/O device. The platform hardware may comprise components such as manageability engine and verification engine that are used to verify the contents of the I/O device even before the contents of the I/O device are exposed to an operating system supported by a host. The platform components may delete the infected portions of the contents of I/O device if the verification process indicates that the contents of the I/O device include the infected portions.
Claims29
A method comprising:
- performing a platform hardware-based scanning of contents of a device, wherein the platform hardware-based scanning is performed at a platform hardware of a computing system and independent of and without interfering with an operating system of the computing device;
- receiving, at the platform hardware, information from a local agent, wherein the information indicates one or more infected portions of the contents of the device;
- and
- issuing, from the platform hardware and prior to exposing the contents of the device to the operating system, an alert notification relating to deletion of the one or more infected portions found to be present within the contents of the device.
An apparatus comprising:
- a chipset of a computing device, the chipset having a platform hardware to:
- perform platform a hardware-based scanning of contents of a device, wherein the platform hardware-based scanning is performed independent of and without interfering with an operating system of the computing device;
- receive information from a local agent, wherein the information indicates one or more infected portions of the contents of the device;
- and
- issue, prior to exposing the contents of the device to the operating system, an alert notification relating to deletion of the one or more infected portions found to be present within the contents of the device.
At least one non-transitory machine-readable medium having stored thereon instructions which, when executed, cause a processing device to perform one or more operations comprising:
- performing a platform hardware-based scanning of contents of a device, wherein the platform hardware-based scanning is performed at a platform hardware of a computing system and independent of and without interfering with an operating system of the computing device;
- receiving, at the platform hardware, information from a local agent, wherein the information indicates one or more infected portions of the contents of the device;
- and
- issuing, from the platform hardware and prior to exposing the contents of the device to the operating system, an alert notification relating to deletion of one or more infected portions found to be present within the contents of the device.
At least one non-transitory machine-readable medium having stored thereon instructions which, when executed, cause a processing device to perform one or more operations comprising:
- receiving, at a platform hardware of a computing system, an interrupt from an input/output (I/O) device to perform a platform hardware-based scanning of contents of the I/O device, wherein the platform hardware-based scanning is performed at the platform hardware of the computing system serving at a host computing system and wherein the platform hardware-based scanning is performed independent of and without interfering with an operating system of the computing system, wherein the platform hardware-based scanning includes
- verifying, at the platform hardware, the contents of the I/O device before the contents of the I/O device are exposed to the operating system;
- detecting, at the platform hardware, infected portions of the contents if the infected portions are present within the contents of the I/O device;
- and
- deleting, via the platform hardware, the infected portions of the contents before the contents are exposed to the operating system.
Dependencies are inferred from the claim text.