Patent ID: 8856941
Filing Date: 2014-10-07
Classification: G06F,H04L,H04W

Abstract:
1. A method to perform integrity validation of a network device, the method comprising: receiving a first code integrity measurement of a first code stored in a memory of the network device; generating a first key based on (1) a root key stored in a secure memory of the network device and (2) the first code integrity measurement, wherein the first key is valid when the first code integrity measurement is valid, wherein the first key relates to a first stage of trust associated with a first function of the network device, and wherein a valid first key is capable of being used by a first stakeholder to access the first function; receiving a second code integrity measurement of a second code stored in the memory of the network device; generating a second key based on (1) the first key and (2) the second code integrity measurement, wherein the second key is valid when the first code integrity measurement is valid and the second code integrity measurement is valid, wherein the second key relates to a second stage of trust associated with a second function, and wherein a valid second key is capable of being used by a second stakeholder to access the second function; receiving a first nonce from the first stakeholder and a second nonce from the second stakeholder; and sending a first signed message to the first stakeholder in response to the first nonce and a second signed message to the second stakeholder in response to the second nonce, wherein each of the first and second signed messages indicates an untrustworthy state, a partial trustworthy state, or a trustworthy state.