Device attestation through security hardened management agent
US10803175B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Mar 6, 2015 |
| Grant date | Oct 13, 2020 |
| Priority date | — |
| Expiry date | Jun 5, 2035 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L2209/127
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A device boots in a secure manner that allows measurements reflecting which components are loaded during booting to be generated. Measurements of such components, as well as of a device management agent and the security state of the device, are also obtained. The device management agent accesses an attestation service for an enterprise, which is a collection of resources managed by a management service. The device management agent provides the obtained measurements to the attestation service, which evaluates the measurements and based on the evaluation determines whether the device is verified for use in the enterprise. The management service uses this verification to ensure that the device management agent is running in a secure manner, is accurately providing indications of the state of the device to the management service, and is implementing policy received from the management service.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.