Patent ID: 8971538
Filing Date: 2015-03-03
Classification: G06F,H04L

Abstract:
1. A computer-implemented method of validating firmware, comprising: sending, from a component of a computing system different from a host machine provisioned to a user such that the user has access to at least one central processing unit of the host machine, a request to validate, based at least in part on a firmware image, firmware information on the host machine, the request being sent to an external port of an external network interface independent of the at least one central processing unit of the host machine; causing the firmware image to be copied to a secure location external to the host machine, the host machine being configured such that the firmware image is updatable via the external port, the external port being inaccessible to the at least one central processing unit of the host machine; executing a cryptographic hashing algorithm against at least a portion of the firmware image to generate a set of hash values; comparing the generated set of hash values to an approved set of hash values stored inaccessible to the central processing unit, the approved set of hash values corresponding to an approved state of the firmware image; and if the generated set of hash values does not match the approved set of hash values, performing at least one remedial action with respect to the host machine.