Patent ID: 9690598
Date: 2017-06-27
CPC Classifications: G06F,H04L

Claim:
1. A method to repair a first device that has been corrupted in a field by sending the first device that has been corrupted a known-good configuration derived from a majority of devices from a first set of devices in the field comprising: an attestation server remotely commanding the first set of devices and the first device to provide direct access to a kernel memory of each of the first set of devices and the first device to: monitor any access to the kernel memory, perform an inventory and content scan of the hardware stack and the software stack of all of the first set of devices and the first device, generate a fixed-size bit string hash value by using a cryptographic hash function that takes an arbitrary block of data that represents a result of the inventory and content scan of the hardware stack and the software stack and access to the kernel memory and return the fixed-size bit string hash value, and to send the fixed-size bit string hash value for each device to the attestation server; the attestation server automatically using the fixed-size bit string hash value from the first set of devices to determine a statistically known-good configuration; the attestation server using the known-good configuration and the fixed-size bit string hash value from the first device to automatically detect a change to the hardware stack or software stack or access to the kernel memory of the first device; the attestation server automatically providing the known-good configuration to the first device so the first device can automatically reconfigure itself back to the known-good configuration.