Protection of the configuration of modules in computing apparatus

• US 7,430,668 B1
• Filed: 02/15/2000
• Issued: 09/30/2008
• Est. Priority Date: 02/15/1999
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Chen, Liqun, Chan, David
• Primary Examiner(s): NGUYEN, MINH DIEU T
• Application Number:
  US09/913,454
• Time in Patent Office: 3,150 Days
• Field of Search: 713 1- 2, 713/100, 713/200, 713/155, 713/187, 380/155, 726/26
• US Class Current: 713/187
• CPC Class Codes: G06F 11/2289 by configuration test
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 2207/7219 Countermeasures against side channel or fault attacks
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A method of protecting from modification computer apparatus comprising a plurality of functional modules by monitoring the configuration of functional modules within the computer apparatus. The method comprises: storing a module configuration of the computer apparatus; and checking the actual module configuration against the stored module configuration, and inhibiting function of the computer apparatus if the actual module configuration does not satisfactorily match the stored module configuration. Advantageously, the module configuration is stored on a security token, such as a smart card.

Claims

1. A method of protecting from modification computer apparatus comprising a plurality of functional modules, wherein the computer apparatus contains or is in communication with a trusted device adapted to respond to a user in a trusted manner, the method comprising:

storing a module configuration of the computer apparatus providing an identification of each functional module in the computer apparatus, wherein the module configuration is stored on a smart card;

the trusted device performing a cryptographic identification process for modules with a cryptographic identity to identify said modules and thereby determine an actual module configuration;

the trusted device comparing the actual module configuration against the stored module configuration, wherein the trusted device is adapted to communicate securely with the stored module configuration; and

the trusted device inhibiting function of the computer apparatus while the actual module configuration does not satisfactorily match the stored module configuration.

2. A method as claimed in claim 1, wherein the stored module configuration is held separately from the computing apparatus.

3. A method as claimed in claim 1, wherein the stored module configuration is stored such that it is accessible only by a cryptographic authentication process.

4. A method as claimed in claim 1, wherein the step of checking of the actual module configuration comprises a cryptographic identification process for modules with a cryptographic identity.

5. A method as claimed in claim 1, wherein a stored module configuration is held by a remote module validation authority and the remote validation authority provides a service allowing a replacement smart card to be provided if a smart card is lost or stolen.

6. A method as claimed in claim 1, wherein the trusted device is a tamper-resistant or a tamper-detecting device.

7. Computer apparatus adapted for protection against modification, the computer apparatus comprising a plurality of functional modules, one of said modules being a trusted device adapted to respond to a user in a trusted manner, the computer apparatus having a module configuration providing an identification of each functional module in the computer apparatus, wherein the trusted device is adapted to compare a module configuration of the computer apparatus against a stored module configuration by performing a cryptographic identification process for modules with a cryptographic identity to determine an actual module configuration and to compare the actual module configuration against the stored module configuration, wherein function of the computer apparatus is inhibited while the actual module configuration does not satisfactorily match the stored module configuration, wherein the stored module configuration is stored on a smart card.

8. Computer apparatus as claimed in claim 7, wherein the stored module configuration is held separately from the computing apparatus and wherein the computer apparatus is adapted to obtain the stored module configuration by a cryptographic authentication process.

9. Computer apparatus as claimed in claim 7, wherein the trusted device is a tamper-resistant or a tamper-detecting device.

10. A method of protecting from modification computer apparatus comprising a plurality of functional modules by monitoring the configuration of functional modules within the computer apparatus, the method comprising:

storing a module configuration of the computer apparatus on a smart card, the module configuration being an identification of each functional module in the computer apparatus as validly formed, on a security token removably attachable to the computer apparatus; and

checking an actual module configuration against the stored module configuration,

wherein the computer apparatus contains or is in communication with a trusted device adapted to respond to a user in a trusted manner and the trusted device inhibits function of the computer apparatus if the actual module configuration does not satisfactorily match the stored module configuration;

wherein the trusted device is adapted to communicate securely with the smart card.

11. A method as claimed in claim 10, wherein the stored module configuration is stored such that it is accessible only by a cryptographic authentication process.

12. A method as claimed in claim 11, wherein the trusted device is adapted to perform the step of checking the actual module configuration against the stored module configuration.

13. A method as claimed in claim 10, wherein the stored module configuration is also held by a remote module validation authority.

14. A method as claimed in claim 13, wherein the step of checking the actual module configuration against the stored module configuration involves use of the stored module configuration held by the remote module validation authority.

15. A method as claimed in claim 13, wherein the remote validation authority provides a service allowing a replacement smart card to be provided if a smart card is lost or stolen.

16. A method as claimed in claim 10, wherein the trusted device is a tamper-resistant or a tamper-detecting device.