Patent ID: 9436827
Filing Date: 2016-09-06
CPC Classification: G06F

Claim Text:
1. A method for attesting a component of a managed system during a boot process, comprising steps of: verifying that the managed system is in a trusted state; in response to verifying that the managed system is in a trusted state, requesting an enrollment of the managed system, wherein the requesting step further comprises retrieving enrollment data associated with the managed system; retrieving, by a managing system, current input data associated with the component of the managed system; comparing, by the managing system, the current input data against the enrollment data in order to determine whether the managed system can retain a trusted state for the managed system; if the current input data matches the enrollment data in response to the comparing step, the managed system retains the trusted state; accepting, by the managing system, the trusted state until receipt of a notification, from the managed system having a retained trusted state, of an update to the managed system; receiving, by the managing system, the notification from the managed system that the component of the managed system has been updated; retrieving, by the managing system, updated current input data associated with the component in response to the notification being received; retrieving, by the managing system, further current input data associated with the component of the managed system; and comparing, by the managing system, the further current input data against the updated current input data in order to determine whether the managed system can retain the trusted state, wherein the enrollment data is replaced with the updated current input data if the further current input data matches the updated current input data in response to the comparing of the further current input data, wherein the enrollment data that is replaced was retrieved when requesting the enrollment of the managed system by the managing system in response to verifying that the managed system is in a trusted state, and the updated current input data that replaces the enrollment data was retrieved by the managing system in response to the notification being received by the managing system.