Patent ID: 9135436
Filing Date: 2015-09-15
Classification: G06F

Abstract:
1. A computer-implemented method, comprising: separating, by a computing device, an image into a plurality of layers to form a trusted execution stack, each layer comprising a plurality of components combined into a logical grouping; and hardening, by the computing device, each of the plurality of layers of the trusted execution stack, wherein the hardening of the plurality of layers comprises digitally signing the respective logical grouping into the respective layer and applying a digital signature of each of the plurality of layers to a next layer in the plurality of layers such that each of the plurality of layers are authenticated in an order when loading the trusted execution stack, and the plurality of layers comprises hardware and software layers, and wherein the hardening of each of the plurality of layers further comprises attesting firmware, hardware, reconfiguration hardware, hardware emulators, at least one host operating system, and at least one hypervisor.