Method for securing access to a computer device
AssigneeToucan System
InventorsJonathan Brossard, Nicolas Massaviol
Life of this patent
Estimating the term…
Abstract
The invention relates to a method for securing access to a computer device, that includes the step of establishing a secured connection and authentication of said computer device and the user of the computer device with a remote server, wherein the steps of establishing the secured connection and authentication are carried out upon the execution of commands included in a data set adapted for implementing the pre-start of the computer device before triggering the execution of the boot loader of the computer device operating system.
Claims16
A method of securing access to a computer device comprising a processor and memory, the method comprising:
- storing, by the processor, an encrypted operating system and an operating system bootloader in a first partition of the memory;
- storing, by the processor, operating system temporary files in a second partition of the memory, wherein the second partition is separate from the first partition;
- and
- setting up a cryptographically secure connection and authentication of said computer device and a user of the computer device with a remote server, wherein setting up the cryptographically secure connection and authentication is carried out during execution by the processor of instructions included in a data set configured to cause the processor to initiate a preliminary start up of the computer device before execution of the operating system bootloader of said computer device and wherein the encrypted operating system is decrypted at the computer device during the preliminary start up of the computer device using a first cryptographic key sent by the remote server through the cryptographically secure connection, and wherein the authentication comprises the decryption of the operating system temporary files stored in the second partition using a second cryptographic key associated to the user;
- calculating a checksum of the encrypted operating system;
- sending the checksum to the remote server over the cryptographically secure connection for verification;
- and
- receiving, from the remote server, a replacement encrypted operating system over the cryptographically secure connection when the remote server determines an update to the operating system is available based on the verification of the checksum.
A method of securing access to a computer device comprising a processor and memory storing an encrypted operating system and an operating system bootloader, the method performed by the computing device during a preliminary startup procedure prior to execution of the operating system bootloader, the method comprising:
- storing the encrypted operating system and the operating system bootloader in a first partition of the memory;
- storing operating system temporary files in a second partition of the memory, wherein the second partition is separate from the first partition;
- setting up a cryptographically secure connection between the computer device and a remote server;
- sending authentication data to the remote server over the cryptographically secure connection;
- receiving a first decryption key from the remote server over the cryptographically secure connection;
- decrypting, at the computer device, the encrypted operating system stored in memory of the computer device using the first decryption key;
- transferring execution from the preliminary startup procedure to the bootloader of the operating system;
- decrypting the operating system temporary files stored in the second partition using a second decryption key associated to the user;
- calculating a checksum of the encrypted operating system;
- sending the checksum to the remote server over the cryptographically secure connection for verification;
- and
- receiving, from the remote server, a replacement encrypted operating system over the cryptographically secure connection when the remote server determines an update to the operating system is available based on the verification of the checksum.
A method of securing access to a remote computer device comprising a processor and memory storing an encrypted operating system and an operating system bootloader, the method comprising:
- storing the encrypted operating system and the operating system bootloader in a first partition of the memory;
- storing operating system temporary files in a second partition of the memory, wherein the second partition is separate from the first partition;
- encrypting an operating system for the remote computer device using an encryption key;
- storing the encryption key remote from the computer device;
- setting up a cryptographically secure connection between the remote computer device and the server;
- receiving authentication data from the remote computer device over the cryptographically secure connection;
- verifying the authentication data;
- in response to verifying the authentication data, sending the decryption key for decryption of the operating system to the remote computer device over the cryptographically secure connection;
- decrypting the operating system temporary files stored in the second partition using a second decryption key associated to the user;
- receiving a checksum from the remote computer device over the cryptographically secure connection;
- verifying the checksum;
- and
- sending a replacement encrypted operating system over the cryptographically secure connection when verifying the checksum determines an update to the operating system is available.
Dependencies are inferred from the claim text.