The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 04, 2018

Filed:

Jun. 07, 2016
Applicant:

Intel Corporation, Santa Clara, CA (US);

Inventors:

Radhakrishna R K Hiremane, Beaverton, OR (US);

Anil S. Keshavamurthy, Portland, OR (US);

Assignee:

Intel Corporation, Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 3/06 (2006.01); G06F 9/455 (2018.01); G06F 11/07 (2006.01); G06F 21/54 (2013.01);
U.S. Cl.
CPC ...
G06F 9/45558 (2013.01); G06F 9/45541 (2013.01); G06F 11/07 (2013.01); G06F 11/0712 (2013.01); G06F 11/0766 (2013.01); G06F 21/54 (2013.01); G06F 2009/45583 (2013.01); G06F 2009/45591 (2013.01);
Abstract

Techniques are described for providing processor-based dedicated fixed function hardware to perform runtime integrity measurements for detecting attacks on system supervisory software, such as a hypervisor or native Operating System (OS). The dedicated fixed function hardware is provided with memory addresses of the system supervisory software for monitoring. After obtaining the memory addresses and other information required to facilitate integrity monitoring, the dedicated fixed function hardware activates a lock-out to prevent reception of any additional information, such as information from a corrupted version of the system supervisory software. The dedicated fixed function hardware then automatically performs periodic integrity measurements of the system supervisory software. Upon detection of an integrity failure, the dedicated fixed function hardware uses out-of-band signaling to report that an integrity failure has occurred. The dedicated fixed function hardware provides for runtime integrity verification of a platform in a secure manner without impacting the performance of the platform.


Find Patent Forward Citations

Loading…