Patent ID: 11886593
Assignee: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A non-transitory machine-readable storage medium comprising instructions that upon execution cause an authentication module to:
receive, at the authentication module, a software stack of a platform, wherein the software stack comprises a plurality of software elements, and wherein the software stack is uniquely determined;
measure, at the authentication module, the plurality of software elements of the software stack to generate respective hashes of the plurality of software elements;
generate, at the authentication module, a creation hash and a creation ticket, the creation hash being based on a value produced by combining the respective hashes of the plurality of software elements;
store the creation hash in a secure memory of the authentication module;
send the creation ticket from the authentication module to the platform in which the software stack is to execute; and
after the sending of the creation ticket from the authentication module to the platform:
receive, at the authentication module from the platform, a command to certify the creation ticket for verifying a state of the platform,
in response to the command, retrieve the creation hash from the secure memory and certify the creation ticket based on the retrieved creation hash,
after certifying the creation ticket, generate, at the authentication module, a certified structure comprising the creation hash, and sign the certified structure, and
send the signed certified structure from the authentication module to the platform to verify the state of the platform.