Kernel Attestation via Verifier for Unreachable BMC Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in detecting and addressing kernel integrity violations in computing systems when the baseboard management controller (BMC) is not connected to a management network or the target entity is unreachable, leading to potential kernel compromise and lack of timely remediation.
Innovation Solution
Implement a verifier system that performs attestation of runtime kernel information using a kernel integrity monitoring controller (KIMC) to generate attestation data, which is then processed by a verifier system over a network, enabling integrity determination even when the KIMC cannot directly notify a target entity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the BMC is not connected to a management network or the target entity is unreachable, then direct notification of kernel integrity violations is prevented, but the system lacks timely detection and remediation capability
Solution Approach 1:
The patent introduces a verifier system as an intermediary component that receives attestation data from the KIMC via an attestation agent. This mediator enables indirect communication between the KIMC and the target entity, allowing integrity verification to proceed even when direct notification paths are unavailable. The verifier system processes the attestation data and determines kernel integrity without requiring direct BMC-to-target-entity connectivity.
2Loss of time
If the KIMC directly notifies the target entity of kernel integrity violations, then timely remediation is enabled, but the system becomes dependent on network connectivity and target entity reachability
Solution Approach 1:
The patent segments the kernel integrity verification system into independent components: the KIMC that performs monitoring, the attestation agent that collects data, and the verifier system that makes determinations. This segmentation allows each component to operate independently, with the KIMC continuing its monitoring function regardless of network connectivity status, and the verifier system processing attestation data when ready, thereby reducing dependency on continuous network availability.
3Adaptability or versatility
If a verifier system is implemented for remote attestation, then operational independence is improved, but system complexity increases
Solution Approach 1:
The verifier system is designed to handle multiple functions: receiving attestation data from multiple sources, processing different types of integrity violations, and making determination decisions. This multi-functionality consolidates what could be multiple separate systems into a single versatile component, reducing overall system complexity while maintaining operational independence. The attestation agent also serves multiple purposes by collecting and transmitting various types of attestation data.
Data Source
AI summary
In some examples, a verifier system receives, over a network from a computing system, attestation data including information from a data structure stored in a kernel integrity monitoring controller. The information includes a configuration value derived based on applying a function on monitoring configuration information, and an extended value derived based on extending a prior value in the data structure with a new value from a log recording changed measurements of the kernel information. The verifier system determines an integrity of the kernel information using the configuration value and the extended value for attestation of the computing system.