US 12,010,144 B2
End-to-end device attestation
Ned M. Smith, Beaverton, OR (US); Jose Benchimol, Haifa (IL); and Andrew Draper, Chesham (GB)
Assigned to Intel Corporation, Santa Clara, CA (US)
Filed by Intel Corporation, Santa Clara, CA (US)
Filed on Jun. 17, 2021, as Appl. No. 17/351,004.
Claims priority of provisional application 63/090,030, filed on Oct. 9, 2020.
Claims priority of provisional application 63/041,007, filed on Jun. 18, 2020.
Prior Publication US 2021/0314365 A1, Oct. 7, 2021
Int. Cl. H04L 29/06 (2006.01); G06F 11/34 (2006.01); H04L 9/40 (2022.01); G06F 11/30 (2006.01); G06F 21/57 (2013.01)
CPC H04L 63/20 (2013.01) [G06F 11/3409 (2013.01); G06F 11/3055 (2013.01); G06F 11/3089 (2013.01); G06F 21/57 (2013.01)] 28 Claims
OG exemplary drawing
 
1. A computing system, comprising:
at least one memory to store instructions; and
processing circuitry to execute the instructions to perform operations that verify a state of a hardware device capable to perform compute operations on behalf of the computing system, the instructions to perform operations to:
obtain layered attestation evidence from the hardware device regarding the state of the hardware device, wherein the layered attestation evidence includes attesting evidence from a first hardware layer of the hardware device that is dependent on attesting evidence from a second hardware layer of the hardware device;
obtain endorsement information to be used to evaluate the layered attestation evidence, the endorsement information obtained from a manifest and relating to a third party verification of the state of the hardware device;
determine an appraisal policy to be used to evaluate the layered attestation evidence, the appraisal policy obtained from an expected device definition;
validate attestation of the state of the hardware device by applying the appraisal policy and the endorsement information to evaluate the layered attestation evidence; and
perform compute operations with the hardware device, in response to the attestation of the state of the hardware device.