BRPI0501783A - Sistema e processo para inicialização de sistema operacional protegido usando validação de estado - Google Patents

Sistema e processo para inicialização de sistema operacional protegido usando validação de estado

Info

Publication number
BRPI0501783A
BRPI0501783A BR0501783-1A BRPI0501783A BRPI0501783A BR PI0501783 A BRPI0501783 A BR PI0501783A BR PI0501783 A BRPI0501783 A BR PI0501783A BR PI0501783 A BRPI0501783 A BR PI0501783A
Authority
BR
Brazil
Prior art keywords
loader
operating system
verified
system key
boot
Prior art date
Application number
BR0501783-1A
Other languages
English (en)
Inventor
Bryan Mark Willman
Paul England
Kenneth D Ray
Jamie Hunter
Lonny Dean Mcmichael
Derek Norman Lassalle
Pierre Jacomet
Mark Eliot Paley
Thekkthalackal Varugis Kurien
David B Cross
Original Assignee
Microsoft Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Corp filed Critical Microsoft Corp
Publication of BRPI0501783A publication Critical patent/BRPI0501783A/pt
Publication of BRPI0501783B1 publication Critical patent/BRPI0501783B1/pt

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/22—Microcontrol or microprogram arrangements
    • G06F9/24—Loading of the microprogram
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/575—Secure boot
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/40—Transformation of program code
    • G06F8/54—Link editing before load time
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/4401—Bootstrapping

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)
  • Stored Programmes (AREA)
  • Manipulator (AREA)
  • Exchange Systems With Centralized Control (AREA)
  • Numerical Control (AREA)
  • Sealing Devices (AREA)
  • Spinning Or Twisting Of Yarns (AREA)
  • Operation Control Of Excavators (AREA)

Abstract

"SISTEMA E PROCESSO PARA INICIALIZAçãO DE SISTEMA OPERACIONAL PROTEGIDO USANDO VALIDAçãO DE ESTADO". Descreve-se um mecanismo para inicialização de sistema operacional protegido, que impede componentes invasores de serem carregados com o sistema operacional e, assim, impede a divulgação da chave do sistema sob circunstâncias inadequadas. Após uma parte do procedimento de partida da máquina ter ocorrido, o carregador do sistema operacional é executado, o carregador é validado, e a existência de um estado de máquina correta é verificada e/ou criada. Após o carregador ter sido verificado, como sendo um carregador legítimo, e o estado da máquina, no qual ela está rodando, é verificado como sendo correto, o comportamento futuro do carregador é conhecido para proteção contra o carregamento de componentes invasores, que podem provocar a divulgação da chave do sistema. Com o comportamento do carregador sendo conhecido como seguro para a chave do sistema, o validador pode deslacrar a chave do sistema e fornecê-la ao carregador.
BRPI0501783A 2004-06-30 2005-05-23 sistema e processo para inicialização de sistema operacional protegido usando validação de estado BRPI0501783B1 (pt)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US10/882,134 US7694121B2 (en) 2004-06-30 2004-06-30 System and method for protected operating system boot using state validation

Publications (2)

Publication Number Publication Date
BRPI0501783A true BRPI0501783A (pt) 2006-02-07
BRPI0501783B1 BRPI0501783B1 (pt) 2017-05-02

Family

ID=35106886

Family Applications (1)

Application Number Title Priority Date Filing Date
BRPI0501783A BRPI0501783B1 (pt) 2004-06-30 2005-05-23 sistema e processo para inicialização de sistema operacional protegido usando validação de estado

Country Status (20)

Country Link
US (1) US7694121B2 (pt)
EP (1) EP1612666B1 (pt)
JP (2) JP4796340B2 (pt)
KR (1) KR101176646B1 (pt)
CN (1) CN100454246C (pt)
AT (1) ATE488800T1 (pt)
AU (1) AU2005201995B2 (pt)
BR (1) BRPI0501783B1 (pt)
CA (1) CA2507793C (pt)
CO (1) CO5700184A1 (pt)
DE (1) DE602005024744D1 (pt)
IL (1) IL168907A (pt)
MX (1) MXPA05005764A (pt)
MY (1) MY143926A (pt)
NO (1) NO332737B1 (pt)
NZ (1) NZ540356A (pt)
RU (1) RU2413295C2 (pt)
SG (1) SG118327A1 (pt)
TW (1) TWI438686B (pt)
ZA (1) ZA200504397B (pt)

Families Citing this family (49)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8972590B2 (en) * 2000-09-14 2015-03-03 Kirsten Aldrich Highly accurate security and filtering software
US20060075236A1 (en) * 2004-09-30 2006-04-06 Marek James A Method and apparatus for high assurance processing
US8474049B2 (en) * 2005-06-28 2013-06-25 Panasonic Corporation Verification method, information processing device, recording medium, verification system, certification program, and verification program
KR100736083B1 (ko) * 2005-10-28 2007-07-06 삼성전자주식회사 멀티 로딩 장치 및 방법
US8291226B2 (en) * 2006-02-10 2012-10-16 Qualcomm Incorporated Method and apparatus for securely booting from an external storage device
WO2008068908A1 (ja) 2006-12-04 2008-06-12 Eugrid Inc. 情報処理装置および情報管理プログラム
JP4822544B2 (ja) * 2006-04-26 2011-11-24 株式会社リコー 複数のモジュール構成情報を管理できる画像形成装置
US20100306844A1 (en) * 2006-10-20 2010-12-02 Takashi Ohyama Application information tampering monitoring apparatus and method
US8380987B2 (en) * 2007-01-25 2013-02-19 Microsoft Corporation Protection agents and privilege modes
US7765374B2 (en) * 2007-01-25 2010-07-27 Microsoft Corporation Protecting operating-system resources
KR101209252B1 (ko) 2007-02-02 2012-12-06 삼성전자주식회사 전자기기의 부팅 방법 및 부팅 인증 방법
US20090007100A1 (en) * 2007-06-28 2009-01-01 Microsoft Corporation Suspending a Running Operating System to Enable Security Scanning
US8458460B2 (en) * 2007-09-27 2013-06-04 Intel Corporation Digest generation from instruction op-codes
US8683213B2 (en) * 2007-10-26 2014-03-25 Qualcomm Incorporated Progressive boot for a wireless device
US7865712B2 (en) * 2007-12-26 2011-01-04 Intel Corporation Method and apparatus for booting a processing system
JP5062687B2 (ja) * 2008-03-31 2012-10-31 Ｅｕｇｒｉｄ株式会社 情報処理装置
WO2009153387A1 (en) 2008-06-16 2009-12-23 Nokia Siemens Networks Oy Software loading method and apparatus
RU2396594C2 (ru) * 2008-08-06 2010-08-10 Закрытое акционерное общество "Аладдин Р.Д." Способ защищенной загрузки операционной системы компьютера с проверкой целостности
KR101013419B1 (ko) * 2008-08-29 2011-02-14 주식회사 안철수연구소 시스템 보호 장치 및 방법
US8302182B2 (en) * 2008-09-01 2012-10-30 Mediatek Inc. Embedded system with authentication, and associated authentication method
KR101197182B1 (ko) * 2008-12-23 2012-11-02 한국전자통신연구원 컴퓨터 시스템에서의 해킹 방지 장치 및 방법
GB2471282B (en) * 2009-06-22 2015-02-18 Barclays Bank Plc Method and system for provision of cryptographic services
GB2471464A (en) * 2009-06-29 2011-01-05 Nokia Corp Procedure for generating a merged command list form the static lists to be used to start up or boot up the host device.
US8856941B2 (en) * 2010-04-12 2014-10-07 Interdigital Patent Holdings, Inc. Staged control release in boot process
CN102024105A (zh) * 2010-11-16 2011-04-20 深圳市文鼎创数据科技有限公司 安全认证方法和装置
US9154299B2 (en) * 2010-12-13 2015-10-06 Novell, Inc. Remote management of endpoint computing device with full disk encryption
EP2729870A4 (en) * 2011-07-08 2014-12-17 Openpeak Inc SYSTEM AND METHOD FOR VALIDATING COMPONENTS DURING A STARTING PROCESS
US20130086371A1 (en) * 2011-09-30 2013-04-04 Pradeep Bisht Method for device-less option-rom bios load and execution
TWI450194B (zh) 2011-11-10 2014-08-21 Inst Information Industry 作業系統處理方法以及系統、以及儲存其之電腦可讀取記錄媒體
US8572410B1 (en) 2012-07-18 2013-10-29 Freescale Semiconductor, Inc. Virtualized protected storage
US9058504B1 (en) * 2013-05-21 2015-06-16 Malwarebytes Corporation Anti-malware digital-signature verification
US9053216B1 (en) 2013-08-09 2015-06-09 Datto, Inc. CPU register assisted virtual machine screenshot capture timing apparatuses, methods and systems
US9167002B2 (en) 2013-08-15 2015-10-20 Microsoft Technology Licensing, Llc Global platform health management
US9304887B2 (en) 2013-09-16 2016-04-05 International Business Machines Corporation Method and system for operating system (OS) verification
US9195831B1 (en) 2014-05-02 2015-11-24 Google Inc. Verified boot
US10140454B1 (en) * 2015-09-29 2018-11-27 Symantec Corporation Systems and methods for restarting computing devices into security-application-configured safe modes
US10177910B2 (en) * 2016-08-31 2019-01-08 Microsoft Technology Licensing, Llc Preserving protected secrets across a secure boot update
US10069633B2 (en) * 2016-09-30 2018-09-04 Data I/O Corporation Unified programming environment for programmable devices
KR101887974B1 (ko) * 2016-12-01 2018-08-13 현대오트론 주식회사 엔진제어기의 안전부팅을 위한 시스템 및 방법
TWI616774B (zh) * 2016-12-08 2018-03-01 緯創資通股份有限公司 電子裝置及其安全起動方法
EP3333748A1 (de) 2016-12-08 2018-06-13 Siemens Aktiengesellschaft Geräteeinheit geeignet für den betrieb im geschützten und/oder offenen betriebszustand sowie zugehöriges verfahren
US9817675B1 (en) 2017-01-31 2017-11-14 Hytrust, Inc. Methods and systems for attaching an encrypted data partition during the startup of an operating system
JP6990994B2 (ja) * 2017-05-26 2022-01-12 キヤノン株式会社 情報処理装置、その制御方法、及びプログラム
CN109040088B (zh) * 2018-08-16 2022-02-25 腾讯科技（深圳）有限公司 认证信息传输方法、密钥管理客户端及计算机设备
JP7077873B2 (ja) * 2018-08-29 2022-05-31 日本電気株式会社 情報処理装置、情報処理方法、およびプログラム
JP7077872B2 (ja) * 2018-08-29 2022-05-31 日本電気株式会社 情報処理装置、情報処理方法、およびプログラム
RU2720220C1 (ru) * 2019-06-21 2020-04-28 Российская Федерация, от имени которой выступает Государственная корпорация по атомной энергии "Росатом" (Госкорпорация "Росатом") Способ загрузки программного обеспечения
DE112020003881T8 (de) 2019-08-16 2022-06-09 Fiduciaedge Technologies Co., Ltd. System und verfahren zur durchführung von trusted computing mit fernbescheinigung und informationsisolierung auf heterogenen prozessoren über eine offene verbindung
WO2025183315A1 (ko) * 2024-02-28 2025-09-04 네이버클라우드 주식회사 하이브리드 클라우드 기반의 원본 및 응용 데이터의 기밀성 보장을 위한 데이터 배포 방법 및 시스템

Family Cites Families (45)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5210875A (en) * 1989-08-25 1993-05-11 International Business Machines Corporation Initial bios load for a personal computer system
US5022077A (en) * 1989-08-25 1991-06-04 International Business Machines Corp. Apparatus and method for preventing unauthorized access to BIOS in a personal computer system
US6658568B1 (en) 1995-02-13 2003-12-02 Intertrust Technologies Corporation Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management
US6157721A (en) 1996-08-12 2000-12-05 Intertrust Technologies Corp. Systems and methods using cryptography to protect secure computing environments
US5943422A (en) 1996-08-12 1999-08-24 Intertrust Technologies Corp. Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels
US5892900A (en) 1996-08-30 1999-04-06 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
EP2110732A3 (en) 1995-02-13 2009-12-09 Intertrust Technologies Corporation Systems and methods for secure transaction management and electronic rights protection
NL1000530C2 (nl) 1995-06-08 1996-12-10 Defil N V Holland Intertrust A Filtreerwerkwijze.
JPH096232A (ja) * 1995-06-21 1997-01-10 Ricoh Elemex Corp 暗号化システム、復号化システム、情報秘匿処理システムおよび情報秘匿通信システム
US5920861A (en) 1997-02-25 1999-07-06 Intertrust Technologies Corp. Techniques for defining using and manipulating rights management data structures
CA2293650C (en) 1997-06-09 2012-09-25 Christian Sven Collberg Obfuscation techniques for enhancing software security
US6249866B1 (en) 1997-09-16 2001-06-19 Microsoft Corporation Encrypting file system and method
US6112181A (en) 1997-11-06 2000-08-29 Intertrust Technologies Corporation Systems and methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information
US6496847B1 (en) 1998-05-15 2002-12-17 Vmware, Inc. System and method for virtualizing computer systems
US6397242B1 (en) 1998-05-15 2002-05-28 Vmware, Inc. Virtualization system including a virtual machine monitor for a computer with a segmented architecture
US6189100B1 (en) 1998-06-30 2001-02-13 Microsoft Corporation Ensuring the integrity of remote boot client data
US6209088B1 (en) 1998-09-21 2001-03-27 Microsoft Corporation Computer hibernation implemented by a computer operating system
US6327652B1 (en) 1998-10-26 2001-12-04 Microsoft Corporation Loading and identifying a digital rights management operating system
US6330670B1 (en) 1998-10-26 2001-12-11 Microsoft Corporation Digital rights management operating system
US7194092B1 (en) 1998-10-26 2007-03-20 Microsoft Corporation Key-based secure storage
JP3273926B2 (ja) * 1999-02-12 2002-04-15 株式会社神戸製鋼所 ディジタル信号処理装置
US6651171B1 (en) 1999-04-06 2003-11-18 Microsoft Corporation Secure execution of program code
US6757824B1 (en) 1999-12-10 2004-06-29 Microsoft Corporation Client-side boot domains and boot rules
US6711675B1 (en) 2000-02-11 2004-03-23 Intel Corporation Protected boot flow
FI114416B (fi) * 2001-06-15 2004-10-15 Nokia Corp Menetelmä elektroniikkalaitteen varmistamiseksi, varmistusjärjestelmä ja elektroniikkalaite
DE60228027D1 (de) * 2001-07-06 2008-09-18 Texas Instruments Inc Sicherer Bootloader zum Sichern digitaler Geräte
US20030028765A1 (en) 2001-07-31 2003-02-06 Cromer Daryl Carvis Protecting information on a computer readable medium
US7191464B2 (en) * 2001-10-16 2007-03-13 Lenovo Pte. Ltd. Method and system for tracking a secure boot in a trusted computing environment
US7137004B2 (en) 2001-11-16 2006-11-14 Microsoft Corporation Manifest-based trusted agent management in a trusted operating system environment
US7159240B2 (en) 2001-11-16 2007-01-02 Microsoft Corporation Operating system upgrades in a trusted operating system environment
US7243230B2 (en) 2001-11-16 2007-07-10 Microsoft Corporation Transferring application secrets in a trusted operating system environment
GB2382419B (en) 2001-11-22 2005-12-14 Hewlett Packard Co Apparatus and method for creating a trusted environment
US7631196B2 (en) 2002-02-25 2009-12-08 Intel Corporation Method and apparatus for loading a trustable operating system
JP3863447B2 (ja) * 2002-03-08 2006-12-27 インターナショナル・ビジネス・マシーンズ・コーポレーション 認証システム、ファームウェア装置、電気機器、及び認証方法
US7343493B2 (en) 2002-03-28 2008-03-11 Lenovo (Singapore) Pte. Ltd. Encrypted file system using TCPA
US6986006B2 (en) 2002-04-17 2006-01-10 Microsoft Corporation Page granular curtained memory via mapping control
US7058768B2 (en) 2002-04-17 2006-06-06 Microsoft Corporation Memory isolation through address translation data edit control
US7565509B2 (en) 2002-04-17 2009-07-21 Microsoft Corporation Using limits on address translation to control access to an addressable entity
WO2003090074A2 (en) 2002-04-18 2003-10-30 Advanced Micro Devices, Inc. Initialization of a computer system including a secure execution mode-capable processor
US6907522B2 (en) * 2002-06-07 2005-06-14 Microsoft Corporation Use of hashing in a secure boot loader
US7085933B2 (en) 2002-06-11 2006-08-01 Lenvo (Singapore) Pte, Ltd. Computer system apparatus and method for improved assurance of authentication
US7200758B2 (en) * 2002-10-09 2007-04-03 Intel Corporation Encapsulation of a TCPA trusted platform module functionality within a server management coprocessor subsystem
RU2231112C1 (ru) * 2002-10-29 2004-06-20 Закрытое акционерное общество "ЦБИ-сервис" Способ подключения персонального компьютера
US7974416B2 (en) 2002-11-27 2011-07-05 Intel Corporation Providing a secure execution mode in a pre-boot environment
US6959262B2 (en) 2003-02-27 2005-10-25 Hewlett-Packard Development Company, L.P. Diagnostic monitor for use with an operating system and methods therefor

Also Published As

Publication number Publication date
KR20060047897A (ko) 2006-05-18
TW200602978A (en) 2006-01-16
CO5700184A1 (es) 2006-11-30
CA2507793C (en) 2013-07-23
NO332737B1 (no) 2012-12-27
AU2005201995A1 (en) 2006-01-19
RU2413295C2 (ru) 2011-02-27
JP5378460B2 (ja) 2013-12-25
DE602005024744D1 (de) 2010-12-30
KR101176646B1 (ko) 2012-08-23
HK1087216A1 (en) 2006-10-06
NZ540356A (en) 2006-11-30
RU2005115918A (ru) 2006-11-20
JP2006018825A (ja) 2006-01-19
ATE488800T1 (de) 2010-12-15
IL168907A (en) 2011-09-27
US7694121B2 (en) 2010-04-06
EP1612666B1 (en) 2010-11-17
AU2005201995B2 (en) 2010-06-17
SG118327A1 (en) 2006-01-27
NO20052391L (no) 2006-01-02
JP4796340B2 (ja) 2011-10-19
TWI438686B (zh) 2014-05-21
MY143926A (en) 2011-07-29
JP2011187089A (ja) 2011-09-22
MXPA05005764A (es) 2006-01-11
EP1612666A1 (en) 2006-01-04
ZA200504397B (en) 2007-03-28
NO20052391D0 (no) 2005-05-18
CA2507793A1 (en) 2005-12-30
BRPI0501783B1 (pt) 2017-05-02
US20060005034A1 (en) 2006-01-05
CN1716199A (zh) 2006-01-04
CN100454246C (zh) 2009-01-21

Similar Documents

Publication Publication Date Title
BRPI0501783A (pt) Sistema e processo para inicialização de sistema operacional protegido usando validação de estado
WO2006133222A3 (en) Constraint injection system for immunizing software programs against vulnerabilities and attacks
WO2009014779A3 (en) System for malware normalization and detection
US9703954B2 (en) Method and system for protecting computerized systems from malicious code
JP6388485B2 (ja) マルウェア発見方法及びシステム
WO2006115935A3 (en) Protecting a computer that provides a web service from malware
WO2007149140A3 (en) System and method for providing transactional security for an end-user device
WO2007125422A3 (en) System and method for enforcing a security context on a downloadable
DE60330627D1 (de) Verwendung eines Hash beim Starten eines sicheren Betriebssystems
TW200731109A (en) Secure execution environment by preventing execution of unauthorized boot loaders
US20150302195A1 (en) Hardware-based stack control information protection
US8683212B2 (en) Method and system for securely loading code in a security processor
BRPI0406615A (pt) motor de polìtica e métodos e sistemas para proteger dados
WO2003034188A3 (en) Method and system for detecting unauthorised executable programs _______________________________________________________________
BR0112029A (pt) ligação por meio de informação não válida
US8763129B2 (en) Vulnerability shield system
Heydemann et al. Formally verified software countermeasures for control-flow integrity of smart card C code
Ruan et al. Survey of return‐oriented programming defense mechanisms
Zhenfang Study on computer trojan horse virus and its prevention
Yilmaz et al. A survey of in-lined reference monitors: Policies, applications and challenges
US20230088304A1 (en) Secure computing system for attestation of secured code, data and execution flows
Abadi Software Security: A Formal Perspective: (Notes for a Talk)
Chen A Multi-layer Dynamic Security Framework for DeFi Smart Contracts
Sadat SECURE BOOT AND FIRMWARE PROTECTION IN AUTOMOTIVE SEMICONDUCTORS: A REVIEW OF CURRENT APPROACHES
NO20040231L (no) Fremgangsmate for a beskytte en programvare, ved anvendelse av et sakalt omnavnings-prinsipp, mot uautorisert bruk av den

Legal Events

Date Code Title Description
B03A Publication of a patent application or of a certificate of addition of invention [chapter 3.1 patent gazette]
B25A Requested transfer of rights approved

Owner name: MICROSOFT TECHNOLOGY LICENSING, LLC (US)

B09A Decision: intention to grant [chapter 9.1 patent gazette]
B16A Patent or certificate of addition of invention granted [chapter 16.1 patent gazette]
B21F Lapse acc. art. 78, item iv - on non-payment of the annual fees in time

Free format text: REFERENTE A 19A ANUIDADE.

B24J Lapse because of non-payment of annual fees (definitively: art 78 iv lpi, resolution 113/2013 art. 12)

Free format text: EM VIRTUDE DA EXTINCAO PUBLICADA NA RPI 2776 DE 19-03-2024 E CONSIDERANDO AUSENCIA DE MANIFESTACAO DENTRO DOS PRAZOS LEGAIS, INFORMO QUE CABE SER MANTIDA A EXTINCAO DA PATENTE E SEUS CERTIFICADOS, CONFORME O DISPOSTO NO ARTIGO 12, DA RESOLUCAO 113/2013.