Carnegie Mellon University

Mark Luk

Adrian Perrig

Leendert Van Doorn

Cynthia Kuo

Arvind Seshadri

Pradeep Khosla

Evan Davis Gaustad

A method, system, and apparatus for verifying integrity and execution state of an untrusted computer. In one embodiment, the method includes placing a verification function in memory on the untrusted computer; invoking the verification function from a trusted computer; determining a checksum value over memory containing both the verification function and the execution state of a processor and hardware on the untrusted computer; sending the checksum value to the trusted computer; determining at the trusted computer whether the checksum value is correct; and determining at the trusted computer whether the checksum value is received within an expected time period.

Verifying integrity and guaranteeing execution of code on untrusted computer platform

A method of securely deploying information to a device includes placing a device into a shielded structure and exchanging timing messages between a keying device located inside the shielded structure and a beacon located outside of the shielded structure. The shielded structure is closed. The exchange of timing messages is terminated, and upon termination, the keying device transfers the information via one or more shielded messages to the device, and the beacon jams the frequency at which the shielded messages are transferred. The shielded structure is opened, and the keying device and beacon exchange messages to verify the secure deployment of the information.

Apparatus and method for secure, user-friendly deployment of information

Growing community of inventors

Fremont, CA, United States of America

Mark Luk