Active verification of boot firmware
US7716470B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Dec 16, 2008 |
| Grant date | May 11, 2010 |
| Priority date | — |
| Expiry date | Dec 16, 2028 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/572
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Techniques are described for generating and actively verifying a boot code associated with a peripheral device of a computer system to prevent potential security threats the boot code may introduce into the computer system. The techniques for generating boot code entail generating the boot code from a high-level programming language using a verification application program interface (API). The API aids in generating a certificate, which is associated with the boot code in that the certificate describes operation of the boot code. After generating the boot code and associated certificate, the two are loaded onto a memory module of the peripheral device. Once the peripheral device is connected to the computer system, the computer system may retrieve the boot code and certificate. The computer system utilizes techniques to actively verify the boot code by performing a security check on the boot code in accordance with the associated certificate. Finally, the computer system executes the boot code based on a result of the security check.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.