Patent ID: 7191464
Filing Date: 2007-03-13
Classification: G06F

Abstract:
1. A method for tracking a secure boot in a computer system, wherein the computer system comprises a plurality of devices, the method comprising the steps of: (a) providing an embedded security system (ESS) in the computer system, wherein the ESS includes at least one boot platform configuration register (PCR) and a shadow PCR for each at least one boot PCR; (b) initiating a platform reset to boot the computer system via BIOS; (c) generating a measurement value for a device of the plurality of devices booted in the computer system; (d) extending the measurement value to one of the at least one boot PCRs and to the corresponding shadow PCR; and (e) comparing the measurement value of each of the at least one boot PCRs with the measurement value of the corresponding shadow PCR, wherein the computer system is trusted if the measurement values match.