American Megatrends International, LLC

Stefano Righi

Madhan B Santharam

Paul Anthony Rhea

Muthukkumaran Ramalingam

Feng Li

A computing device is configured with a hardware root of trust ('HRoT'). The HRoT and a remote registration server exchange public keys while the device is in a trusted environment. The device is then locked by setting a lock status in the HRoT. The device can then be shipped to a recipient. When the device is powered on following transit, the HRoT pauses booting of the device. If a request to unlock the device is received, the HRoT provides an encrypted one-time password to the registration server. The registration server decrypts the one-time password and provides the decrypted one-time password to the HRoT. If the HRoT determines that one-time password received from the registration server is identical to the one-time password it generated, the HRoT sets the lock status of the device to unlocked and allows the device to boot.

Securing computing devices during transit

A computing system includes a baseboard management controller ('BMC') that receives a security token from a management system. The computing system also executes a firmware that collects measurements from components of the computing system. The measurements include data describing the components for use in attestation. The firmware provides the measurements to the BMC, which generates a digital signature of the measurements and the security token. The BMC provides the measurements and the digital signature to the management system, which attempts to verify the digital signature utilizing a public key associated with the BMC. If the management system can verify the digital signature, then the BMC utilized the correct security key to generate the digital signature and the measurements were not tampered with after collection by the firmware. The measurements can then be utilized to attest the computing system.

Growing community of inventors

Lawrenceville, Gabon

Stefano Righi