Patent ID: 11900127
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 14:
15. One or more non-transitory computer-readable memory devices storing computer-executable instructions which, upon execution by one or more processors disposed in a computing device deployed in a 5G (fifth generation) network, cause the computing device to:
provide for System Management Mode (SMM) in the one or more processors to execute a System Management Interrupt (SMI) handler, the SMI handler having default behavior that re-images the computing device to a known good state, in which the SMM is executed in a runtime of a trusted Unified Extensible Firmware Interface (UEFI), wherein a UEFI enclave is initiated in the UEFI runtime;
provide a secure channel between the SMI handler and a deferral ticket minting process that is hosted in a secure enclave on the computing device, in which the secure channel is cryptographically protected using a symmetric key that is commonly shared by the SMI handler and the deferral ticket minting process in the enclave;
configure the ticket minting process for writing a deferral ticket to the secure channel in response to a determination by the deferral ticket minting process that a runtime state of the computing device adheres to a policy;
operate the SMI handler to defer the re-imaging of the computing device responsive to a deferral ticket being present in the secure channel; and
utilize an SGX (Software Guard Extension) versioning protocol that enables provisioning of the common symmetric key to each of the UEFI enclave and the secure enclave hosting the deferral ticket minting process, wherein the UEFI enclave and the secure enclave hosting the deferral ticket minting process are enabled to provision the common symmetric key under the SGX versioning protocol by virtue of sharing a common author.