Off-Host Firmware Integrity Verification via Golden Hash Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Previous information handling systems face challenges in accurately validating the chain of trust for BIOS firmware updates due to potential golden measurement mismatches during off-host verification operations, especially in modular system architectures with independently updatable firmware components.
Innovation Solution
The system stores hash values for firmware components and performs off-host image verification by comparing local hash values with golden hash values, applying a mitigation policy if they do not match, and providing a device verification signal if they do, thereby ensuring robust integrity verification of BIOS component firmware updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If off-host image verification is performed by comparing local hash values with golden hash values, then firmware update integrity verification accuracy is improved, but system complexity increases due to the need for secure communication between information handling systems
Solution Approach 1:
The patent introduces a secure communication intermediary between the first and second information handling systems. The second system acts as a trusted intermediary that stores and provides golden hash values, while the first system performs local verification. This intermediary approach enables accurate off-host verification without requiring direct complex trust relationships between all system components.
Solution Approach 2:
The patent creates a copy of the trusted golden hash values and stores them in the second information handling system. This copying allows the verification process to occur off-host (in the first system) while still referencing the authoritative source, thereby improving verification accuracy without requiring the entire trust chain to be replicated across all systems.
2Adaptability or versatility
If modular system architecture with independently updatable firmware components is implemented, then adaptability is improved, but reliability deteriorates due to potential golden measurement mismatches in the chain of trust
Solution Approach 1:
The patent segments the firmware verification process into independent components: local hash computation, secure communication, golden hash retrieval, and verification comparison. This segmentation allows each firmware component to be verified independently against its corresponding golden hash, maintaining chain of trust reliability even in modular architectures where components can be updated independently.
Solution Approach 2:
The patent performs preliminary actions by pre-computing and storing golden hash values in the second information handling system before firmware updates are deployed. This preliminary preparation ensures that when independent firmware components are updated, their integrity can be immediately verified against pre-established golden values, preventing golden measurement mismatches.
3Measurement precision
If hash value comparison verification is performed for each firmware component, then measurement precision is improved, but loss of time increases due to sequential verification operations
Solution Approach 1:
The patent performs verification on a per-component basis rather than requiring complete firmware image verification. This partial action approach verifies only the specific firmware components that have been updated or are in question, achieving sufficient integrity verification accuracy without the time cost of verifying entire firmware images sequentially.
Data Source
AI summary
An information handling system stores a hash values for firmware components for the information handling system. A processor receives an off-host image verification request from a second information handling system. In response to the off-host image verification request, the processor reads first metadata for a next firmware component, provides the first metadata to the second information handling system, and receives a golden hash value from the second information handling system. In response to the first hash value not matching the golden hash value, the processor applies a mitigation policy. In response to the first hash value matching the golden hash value, the processor provides a device verification signal.