Patent ID: 11909882
Assignee: DELL PRODUCTS L.P.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A system, comprising:
a plurality of information handling systems (IHSs), each having:
a processing device;
a computer readable storage device configured to store a verification application and a unique system identifier that uniquely identifies the IHS; and
a trusted platform module (TPM) configured to store a private Endorsement Key (EK), an EK certificate containing a public EK, a public signing key and a private signing key; and

a first remote system comprising a first computer readable medium configured to store an entitlement database for the plurality of IHSs, wherein for each IHS, the entitlement database associates the unique system identifier specified for the IHS with the EK certificate and the public signing key stored within the TPM of the IHS; and
a second remote system coupled, via a network, to the first remote system and to the plurality of IHSs, wherein the second remote system comprises a second computer readable medium configured to store verification software and a processing device, and wherein upon receiving a verification request from a first IHS to verify an identity of the first IHS, the processing device of the second remote system is configured to execute the verification software to communicate with the first remote system and the first IHS to cryptographically verify the identity of the first IHS;
wherein upon receiving the verification request from the first IHS to verify an identity of the first IHS, the processing device of the second remote system is configured to execute the verification software to:
receive a unique system identifier specified for the first IHS along with the verification request, and
retrieve the EK certificate and the public signing key associated with the unique system identifier from the entitlement database stored within the first computer readable medium of the first remote system;

wherein the processing device of the second remote system is further configured to execute the verification software to:
generate a nonce,
encrypt the nonce with a public EK obtained from the EK certificate; and
transmit the encrypted nonce to the first IHS; and

wherein the processing device of the first IHS is configured to execute the verification application to:
send the verification request and the unique system identifier specified for the first IHS to the second remote system,
receive the encrypted nonce from the second remote system,
decrypt the encrypted nonce using the private EK stored within the TPM of the first IHS,
sign the nonce and the unique system identifier using the private signing key stored within the TPM of the first IHS, and
transmit a signed message containing the nonce and the unique system identifier to the second remote system.