Patent ID: 11907704
Assignee: INTEL CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. An orchestration apparatus for attestation manifest derivation and distribution, the orchestration apparatus comprising:
processing circuitry; and
memory including instructions that, when executed by the processing circuitry, cause the processing circuitry to perform operations to:
obtain a software update package manifest from an edge device;
generate a reference integrity measurement manifest that includes at least one integrity measurement for a reference software update package associated with the software update package manifest based on the software update package manifest, wherein the reference integrity measurement manifest includes a hash of the reference software update package;
initiate an attestation request with the edge device;
verify the edge device based on the at least one integrity measurement and a result of the attestation request;
generate a new device cryptographic identity for the edge device upon verification of a signature for a current device cryptographic identity of the edge device and verification that a hash of a software update package received from the edge device matches the hash of the reference software update package included in the reference integrity measurement manifest; and
generate an attestation record for the edge device based on the new device cryptographic identity.