Extreme Networks, Inc.

Steve W Schroder

Michael Yip

Michael B Rash

Ramanuja Chaitanya Chakravarthula

Kristopher F Orjada

Albert Tao

Minxi Gao

Bagavath Singh Swamynatha Pillai

Disclosed herein are system, method, and computer program product embodiments for verifying the integrity of a boot process without relying on a boot aggregate value. An embodiment operates by cryptographically validating, by a hardware root of trust, a first code module associated with a digital signature. The embodiment determines that the first code module was cryptographically validated and cryptographically measures the first code module thereby generating a first measurement. The embodiment stores a representation of the first measurement in a first platform configuration register (PCR) of a trusted platform module. The embodiment configures a remote attestation agent to instruct a remote attestation server to attest the value stored in the first PCR. The embodiment transmits a TPM attestation quote to the remote attestation server. The embodiment receives an acknowledgment from the remote attestation server indicating a match between the value stored in the first PCR and an allowed cryptographic measurement.

Trust chain preservation for remote attestation

A control backplane replaces the traditional shared bus with a dedicated communication channel using a high-speed protocol, such as Ethernet. The resulting system may conduct several concurrent control sessions with clients and devices associated with the network switch. Removing the shared bus from the control plane also improves the reliability of the new system, because it is no longer susceptible to a single point of failure.

Method and apparatus for a control communication channel in a packet-forwarding device

Growing community of inventors

Lake Oswego, OR, United States of America

Steve W Schroder