17940962. REMOTE ATTESTATION simplified abstract (INTERNATIONAL BUSINESS MACHINES CORPORATION)
Contents
REMOTE ATTESTATION
Organization Name
INTERNATIONAL BUSINESS MACHINES CORPORATION
Inventor(s)
Patrick Joseph Callaghan of Vestal NY (US)
Joseph Douglas Harvey of Binghamton NY (US)
Nicholas Tufano of Poughkeepsie NY (US)
REMOTE ATTESTATION - A simplified explanation of the abstract
This abstract first appeared for US patent application 17940962 titled 'REMOTE ATTESTATION
Simplified Explanation
The abstract describes a method for performing firmware updates on a computer system and ensuring the integrity of the update process through the use of Trusted Platform Modules (TPMs).
- Firmware update is performed on a hardware component of a computer system.
- Hash value associated with the update is collected and added to Platform Control Registers (PCRs) of multiple TPMs.
- Hash value is logged in a log file for record-keeping.
- At a set time, PCR values are received from the TPMs and compared to check for consistency.
- If any PCR value does not match, a warning is issued to alert of a potential issue.
Potential Applications
This technology can be applied in various industries where secure firmware updates are crucial, such as:
- Information technology
- Automotive
- Healthcare
Problems Solved
This innovation addresses the following issues:
- Ensuring the integrity of firmware updates
- Detecting discrepancies in PCR values
- Providing a secure update process for hardware components
Benefits
The benefits of this technology include:
- Enhanced security for firmware updates
- Real-time monitoring of PCR values
- Early detection of potential security breaches
Potential Commercial Applications
Securing Firmware Updates in IT Systems: Enhancing Cybersecurity Through TPMs
Original Abstract Submitted
In one general embodiment, a computer-implemented method includes performing a firmware update on a hardware component of a computer system. A hash value associated with the update of the firmware is collected, and added to Platform Control Registers (PCRs) of multiple Trusted Platform Module (TPMs) of the computer system. The hash value is logged in a log file. At a predetermined time, PCR values are received from the TPMs. The PCR values are compared to determine whether all PCR values match. In response to one of the PCR values not matching, a warning is issued.
