Validation of software residing on remote computing devices
Inventors
Lattin, William L. • Upton, Jimmy R.
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-11151241-B2
Publication Date
2021-10-19
Expiration Date
Abstract
A remote computing device is provided including one or more processors, and a memory device including one or more computer-readable instructions. When executed by the one or more processors, the instructions cause the system to perform operations including receiving a validation request comprising a random data string from a secure computing device, in response to the validation request, generating a first check value based on the random data string and software installed on the remote computing device, and transmitting the first check value to the secure computing device. The secure computing device is configured to compare the first check value to a second check value that is generated using the random data string and an authentic copy of the software.
Core Innovation
A remote computing device detects transition from a lower powered state to a higher powered state and, following the detecting, receives a software validation request comprising a random data string from a secure computing device. In response to the software validation request, the remote computing device generates a first check value based on the random data string and existing software installed on the remote computing device, and provides the first check value to the secure computing device.
The secure computing device obtains an authentic copy of the software installed on the remote computing device, wherein the authentic copy corresponds to a last known authorized software provided to the remote computing device. The secure computing device generates a second check value based on the random data string and the authentic copy, compares the first check value to the second check value, and determines whether the existing software on the remote computing device is valid.
When the existing software is determined to be invalid, the secure computing device provides an instruction to modify operation of the remote computing device. The instruction may be configured to modify or disable operation of the remote computing device, including partially disabling the remote computing device, and may further be configured to correct or recover the existing software.
Claims Coverage
The independent claims cover remote software validation using a random data string and a secure-comparison check-value scheme. Across the three independent claims, the inventive features include power-state-triggered validation requests, generation of a first check value by the remote computing device, secure generation of a second check value using an authentic copy from a secure repository or last known authorized software, comparison to determine validity, and issuance of an instruction to modify or disable operation upon invalidity.
Power-state-transition-triggered software validation
Detecting transition from a lower powered state to a higher powered state, and receiving, following the detecting, a software validation request comprising a random data string from a secure computing device.
Remote first check value generation and provision
Generating a first check value based on the random data string and an existing software installed on the remote computing device; providing the first check value to the secure computing device.
Secure second check value generation from an authentic copy and comparison
Comparing the first check value to a second check value that is generated using the random data string and an authentic copy of the software obtained from a secure repository to determine whether the existing software on the remote computing device is valid.
Instruction to modify or disable operation upon invalidity
Receiving, from the secure computing device when the existing software on the remote computing device is not valid, an instruction to modify operation of the remote computing device.
Two-device validation system with secure repository or secure-data handoff
Providing the first check value and the data string to one of a secure data repository and the secure computing device, and wherein the secure computing device is configured to obtain an authentic copy of the software installed on the remote computing device wherein the authentic copy is a last known authorized software provided to the remote computing device; compute a second check value based on the authentic copy of the software and the data string; determine whether the existing software is valid based on comparison; and provide an instruction configured to cause a modification of the remote computing device in response to a determination that the existing software is not valid.
Collectively, the independent claims define validation of existing software on a remote computing device by coordinating a random data string-based first check value from the remote device with a second check value computed by a secure computing device from an authentic copy, followed by comparison to determine validity and sending an instruction to modify or disable the remote device when invalid.
Stated Advantages
Documented Applications
No documented applications found
Interested in licensing this patent?