Patent ID: 8544092
Filing Date: 2013-09-24
Classification: G06F

Abstract:
1. A peripheral device, comprising: an interface configured to communicate with a computer, wherein said interface comprises a USB (universal serial bus) interface, and said peripheral device comprises a USB peripheral device, said peripheral device being an embedded system comprising a microprocessor core, memory controller, static RAM, flash memory, ROM, system controller, said system controller having an interrupt, at least one timer, and power management components, and said peripheral device further including communications controllers comprising USART controller, SPI controller, I2C controller and USB communications controller; components that comprise said peripheral device are selected from the group consisting of: a single system on chip (SOC) device, an application specific integrated circuit chip (ASIC), and commercial off the shelf (COTS) components; function specific display device hardware; logic configured to perform an integrity verification of an operating system of the computer, wherein the integrity verification comprises: issuing a random challenge by said peripheral device; sending said random challenge from said peripheral device to a trusted platform module (TPM) on a computer; receiving attestation data and log information regarding a boot process of said computer from the TPM by said peripheral device in response to said random challenge; using said peripheral device, verifying said attestation data and said log information by comparing said attestation data and said log information received from said TPM on said computer to verification information comprising a known list of acceptable attestation values, said verification information received by said peripheral device from a configuration server via a network, wherein said logic further comprises a client program configured to execute on said computer, said client program further configured to load from said peripheral device onto said computer and to receive said verification information via a network connection of said computer that is connected to said network, wherein said verification information comprises a plurality of certificates; a display, said display being located on said peripheral device, configured to display a result of the comparison of the attestation data from the computer with the verification information received by said peripheral device from said configuration server; and an external fingerprint reader, said external fingerprint reader configured to send a scanned fingerprint to said computer based on a successful integrity verification.