Compatible trust in a computing device
First Claim
Patent Images
1. A computer implemented method, comprising:
- in response to receiving a service request from a first operating environment executed by a first processor of a device, the service request requesting a service provided by a second operating environment executed by a second processor of the device;
receiving, at the second processor, a first version data associated with the first operating environment executed by the first processor, wherein the first version data is associated with one or more first boot images associated with the first operating environment, and the second processor is locally coupled to the first processor within the device,examining, at the second processor, the received first version data associated with the first operating environment in view of a second version data associated with the second operating environment to determine whether a compatible trust exists between the first operating environment and the second operating environment, wherein the determination is based on whether the first version data and the second version data satisfy a predetermined relationship, the second version data is associated with one or more second boot images associated with the second operating environment, and the first version data and the second version data are provided within the device, anddenying, by the second processor, the service request in response to a determination that the first version data and the second version data do not satisfy the predetermined relationship.
0 Assignments
0 Petitions
Accused Products
Abstract
A method and apparatus for executing a first executable code image having a first version number into a memory of a device in an attempt to establish an operating environment of the device are described. The first executable code image retrieves a second version number from the second executable code image after successfully authenticating the second executable code image. If the first version number and the second version number do not satisfy a predetermined relationship, the second executable code image is prevented from being loaded by the first executable code image.
75 Citations
20 Claims
-
1. A computer implemented method, comprising:
in response to receiving a service request from a first operating environment executed by a first processor of a device, the service request requesting a service provided by a second operating environment executed by a second processor of the device; receiving, at the second processor, a first version data associated with the first operating environment executed by the first processor, wherein the first version data is associated with one or more first boot images associated with the first operating environment, and the second processor is locally coupled to the first processor within the device, examining, at the second processor, the received first version data associated with the first operating environment in view of a second version data associated with the second operating environment to determine whether a compatible trust exists between the first operating environment and the second operating environment, wherein the determination is based on whether the first version data and the second version data satisfy a predetermined relationship, the second version data is associated with one or more second boot images associated with the second operating environment, and the first version data and the second version data are provided within the device, and denying, by the second processor, the service request in response to a determination that the first version data and the second version data do not satisfy the predetermined relationship. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
8. A non-transitory computer-readable storage medium configured to store instructions that, when executed by a processor included in a computing device, cause the computing device to carry out steps that include:
in response to receiving a service request from a first operating environment executed by a first processor of a device, the service request requesting a service provided by a second operating environment executed by a second processor of the device; receiving, at the second processor, a first version data associated with the first operating environment executed by the first processor, wherein the first version data is associated with one or more first boot images associated with the first operating environment, and the second processor is locally coupled to the first processor within the device, examining, at the second processor, the first version data associated with the first operating environment in view of a second version data associated with the second operating environment to determine whether a compatible trust exists between the first operating environment and the second operating environment, wherein the determination is based on whether the first version data and the second version data satisfy a predetermined relationship, the second version data is associated with one or more second boot images associated with the second operating environment, and the first version data and the second version data are provided within the device, and denying, by the second processor, the service request in response to a determination that the first version data and the second version data do not satisfy the predetermined relationship. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
15. A device comprising:
-
a first processor executing a first operating environment; and a second processor executing a second operating environment, the second processor locally coupled to the first processor within the device, wherein the second processor is configured to; in response receiving a service request from the first operating environment executed by the first processor, the service request requesting a service provided by the second operating environment executed by the second processor; receive a first version data associated with the first operating environment executed by the first processor, wherein the first version data is associated with one or more first boot images associated with the first operating environment, examine the first version data associated with the first operating environment in view of a second version data associated with the second operating environment to determine whether a compatible trust exists between the first operating environment and the second operating environment, wherein the determination is based on whether the first version data and the second version data satisfy a predetermined relationship, the second version data is associated with one or more second boot images associated with the second operating environment, and the first version data and the second version data are provided within the device, and deny the service request in response to a determination that the first version data and the second version data do not satisfy the predetermined relationship. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification
-
- Resources
Litigation Campaign Assessment
Thank you for your request. You will receive a custom alert email when the Litigation Campaign Assessment is available.
×
-
Current AssigneeApple Inc.
-
Original AssigneeApple Inc.
-
InventorsDe Atley, Dallas Blake, de Cesare, Joshua, Smith, Michael, Hauck, Jerry, Bush, Jeffrey
-
Primary Examiner(s)Dam, Tuan Q.
-
Assistant Examiner(s)Wei, Zheng
-
Application NumberUS13/542,518Publication NumberTime in Patent Office747 DaysField of SearchNoneUS Class Current717/175CPC Class CodesG06F 21/575 Secure bootG06F 21/577 Assessing vulnerabilities a...
