Chained Loading Diagnostic OS DRTM Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information handling systems face challenges in securely loading diagnostic operating systems, particularly due to the lack of authentication and measurement of modules during the boot process, which can lead to confidentiality and integrity concerns.

Innovation Solution

The method involves a chained loading approach using UEFI BIOS boot, launching a diagnostic OS into a dynamic root of trust measurement (DRTM)-authenticated measured launch environment (MLE), where measurements of modules are extended into the TPM, ensuring secure and authenticated loading of the diagnostic OS.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a diagnostic OS is loaded during boot process, then system diagnostic capability is improved, but security and integrity of the loading process deteriorates due to lack of authentication

Engineering Contradiction:

Improvediagnostic capabilityVSAvoidsecurity and integrity

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary authentication and measurement actions during the boot process before loading the diagnostic OS. The UEFI BIOS measures and authenticates the embedded OS kernel, initrd module, and diagnostic applications before they are executed, ensuring security is established in advance rather than added later.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces UEFI BIOS and TPM as intermediary components between the hardware and the diagnostic OS. The UEFI BIOS acts as a measured boot intermediary that validates each component, while the TPM provides secure storage for measurements and authentication credentials, mediating the trust relationship.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If standard UEFI BIOS boot is used, then compatibility is improved, but security measurement and authentication capability deteriorates

Engineering Contradiction:

ImprovecompatibilityVSAvoidauthentication capability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent merges standard UEFI BIOS boot processes with security measurement and authentication mechanisms. The UEFI BIOS maintains its standard boot functionality while simultaneously performing measurements of each component and extending them to the TPM, combining compatibility with security in a single integrated process.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The UEFI BIOS is given multiple functions: it performs the standard boot process, measures each component's integrity, authenticates components against authorized lists, and extends measurements to the TPM. This multi-functional approach allows a single component to provide both compatibility and security.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Adaptability or versatility

If diagnostic OS modules are downloaded and loaded, then diagnostic functionality is improved, but risk of malware interference deteriorates

Engineering Contradiction:

Improvediagnostic functionalityVSAvoidmalware interference risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system applies preliminary anti-action by measuring and authenticating each diagnostic OS module before it is downloaded or executed. The UEFI BIOS maintains an authorized list of modules and verifies each one against this list, preventing malware from being loaded even if it attempts to infiltrate the download process.

Inventive Principle:

Principle #9Preliminary anti-action

Solution Approach 2:

The patent implements feedback mechanisms where the UEFI BIOS continuously monitors and measures each component during the boot process, extends measurements to the TPM for verification, and uses the TPM's authentication feedback to determine whether to proceed with loading. This closed-loop feedback ensures that any deviation from authorized components is detected and blocked.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS11803454B2Chained loading with static and dynamic root of trust measurements

Publication Date: 2023.10.31 DELL PROD LP

AI summary

Establishing a diagnostic OS for an information handling system platform performing a UEFI BIOS boot to place the platform in a pre-OS state. Upon detecting a particular POST error and/or a platform configuration policy, an embedded OS kernel may be launched into a DRTM-authenticated measured launch environment (MLE). Additional objects for the diagnostic OS may be downloaded. The additional objects may include an initial ramdisk (initrd) module and one or more applications specific to the particular diagnostic OS. The diagnostic OS may be launched as follows: for each diagnostic OS application, launching the application and extending a measurement of the application into a DRTM PCR. Launching the diagnostic OS may include launching an initrd module and extending a measurement of the initrd module into the DRTM PCR. A measurement of embedded OS kernel may be extended into the TPM and the embedded OS kernel may validate the UEFI BIOS sequence.