Patent ID: 9646174
Date: 2017-05-09
CPC Classifications: G06F,G06Q,H04L

Claim:
1. A method implemented by a secure I/O module, the method comprising: polling a peripheral attached to the computer and receiving identification information for the peripheral; determining the received identification information for the polled peripheral does not match peripheral identification information stored within the secure provisioning manifest stored in the secure I/O module, wherein the secure I/O module is coupled to a motherboard of a computer but separate from an operating system and processing environment of a processor associated with the computer, and wherein the secure I/O module interacts with the computer through a bus connection, the secure I/O module representing a separate and secure processing environment within the computer; transmitting to a remote server a request for authorization to use the polled peripheral wherein the request includes the received identification information for the peripheral; receiving from the remote server a response to the request, wherein the response includes a peripheral authorized status and an encrypted updated secure provisioning manifest, the encrypted updated secure provisioning manifest was encrypted prior to being transmitted, when the peripheral is authorized; authenticating the encrypted updated secure provisioning manifest including decrypting the encrypted updated secure provisioning manifest using a cryptographic key stored in the secure I/O module; storing, after decrypting, the updated secure provisioning manifest in the secure I/O module as the secure provisioning manifest for the secure I/O module; and establishing a secure encrypted communication session with the authenticated peripheral using information stored in the updated secure provisioning manifest.