Invention Grant
- Patent Title: System and method for trusted early boot flow
- Patent Title (中): 可信早期启动流的系统和方法
-
Application No.: US11096832Application Date: 2005-03-31
-
Publication No.: US07752428B2Publication Date: 2010-07-06
- Inventor: Shamanna M. Datta , Vincent J. Zimmer , Michael A. Rothman
- Applicant: Shamanna M. Datta , Vincent J. Zimmer , Michael A. Rothman
- Applicant Address: US CA Santa Clara
- Assignee: Intel Corporation
- Current Assignee: Intel Corporation
- Current Assignee Address: US CA Santa Clara
- Agency: Trop, Pruner & Hu, P.C.
- Main IPC: G06F9/00
- IPC: G06F9/00

Abstract:
In some embodiments, the invention involves extending trusted computing environments to the boot firmware. In at least one embodiment, the present invention is intended to enable the trusted environment to be extended forward to the pre-boot environment in addition to post-OS load environment. Embodiments of the present invention enable the trusted environment to extend to the firmware at power-on. The firmware is integrated within the secure perimeter which was previously only available to the OS. In other words, the BIOS is made to be a trusted entity, as well as the OS. Extensible firmware interface (EFI) modules are signed with a public key. The processor has an embedded private key. EFI modules are verified using the keys to ensure a trusted environment from boot to OS launch. Other embodiments are described and claimed.
Public/Granted literature
- US20060224878A1 System and method for trusted early boot flow Public/Granted day:2006-10-05
Information query