Patent SG-11201901127Y-A (SG)
Title: Preserving protected secrets across a secure boot update
Inventor: KINSHUMANN -
IPC: G06F21/57
Filed: 2017-08-25
Abstract: INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property 1#11101111 0 11101 HOE HI 1 0 011101110111110111011111110111 OEN Organization International Bureau (10) International Publication Number (43) International Publication Date .....0\"\" WO 2018/044696 Al 08 March 2018 (08.03.2018) WI P0 I P C T (51) International Patent Classification: (74) Agent: MINHAS, Sandip S. et al.; MICROSOFT TECH- GOOF 21/57(2013.01) GOOF 11/14 (2006.01) NOLOGY LICENSING, LLC, One Microsoft Way, Red- mond, Washington 98052-6399 (US). (21) International Application Number: PCT/US2017/048517 (81) Designated States (unless otherwise indicated, for every (22) International Filing Date: kind of national protection available): AE, AG, AL, AM, 25 August 2017 (25.08.2017) AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, (25) Filing Language: English DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, (26) Publication Language: English HR, HU, ID, IL, IN, IR, IS, JO, JP, KE, KG, KH, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, (30) Priority Data: MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, 15/253,521 31 August 2016 (31.08.2016) US OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, (71) Applicant: MICROSOFT TECHNOLOGY LI- TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. CENSING, LLC [US/US]; One Microsoft Way, Redmond, Washington 98052-6399 (US). (84) Designated States (unless otherwise indicated, for every kind of regional protection available): ARIPO (BW, GH, (72) Inventors: KINSHUMANN, -; MICROSOFT TECH- GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, NOLOGY LICENSING, LLC, One Microsoft Way, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, Redmond, Washington 98052-6399 (US). MCCAR-TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, RON, Christopher; MICROSOFT TECHNOLOGY LI- — EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, CENSING, LLC, One Microsoft Way, Redmond, Wash- MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, = ington 98052-6399 (US). SAMSONOV, Yevgeniy Ana- TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, tolievich; MICROSOFT TECHNOLOGY LICENSING, = KM, ML, MR, NE, SN, TD, TG). LLC, One Microsoft Way, Redmond, Washington _ 98052-6399 (US). = (54) Title: PRESERVING PROTECTED SECRETS ACROSS A SECURE BOOT UPDATE : Obtaining The method includes decrypting (57) a sealed secret. one or = = DPK sealed Lo PCR[7, 11] isli more BLOBs at a computing system from among a plurality of different BLOBs. Each of the BLOBs in the plurality of BLOBs contains the secret. Each of the BLOBs in the plurality of BLOBs is sealed to a different condition from among a = DPI( ualed to PC1110, 2, 4,111 i.gs plurality of conditions. A given condition is a reflection of a system state where = = _ „01 „o_2 the system state is indicative of whether or not the system can be trusted to receive the secret. The method further includes evaluating one or more of the conditions to determine if at least one of the one or more conditions is met. The = = = = = ma mu. method further includes, if at least one of the one or more conditions is met, Figure 2 then providing the secret to an external entity. 9 K„--305 11 .4 1 0 \ 71' 71' — 0 --.... ,- 1-1 Figure 3 ei C [Continued on next page] WO 2018/044696 Al MIDEDIMOMMIDIIMEEMOMMEHINIOROMEEM# Declarations under Rule 4.17: — as to applicant's entitlement to apply for and be granted a patent (Rule 4.17(11)) — as to the applicant's entitlement to claim the earlier application (Rule 4.17(iii)) priority of the Published: — with international search report (Art. 21(3))