PATENT CLAIM ANALYSIS

Application Number: 15977197
Application Type: Utility
Filing Date: 2018-05
Publication Date: 2018-08
Patent Classification: ["726", "023000"]

Abstract:
A computing system may be protected from revoked system updates. A computing system receives an object and scans it for revocation updates to a security structure of the computing system. The security structure is a monotonically nondecreasing collection of segments containing data on whether a system update is revoked, and a system update's status as revoked signifies the revoked system update can no longer be used by the computing system. Based upon scanning the object, the computing system identifies and validates a revocation update. The computing system resolves the revocation update by applying the revocation update to the security structure, by adding or changing one or more segments of the security structure identified by the revocation update, in response to determining that the revocation update is valid, or by denying application of the revocation update to the security structure in response to determining that the revocation update is invalid.

Claim (Index 1):
A computer program product for protecting a hardware security module (HSM) from revoked system updates, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to perform a method comprising:\n receiving, by an HSM which includes a Peripheral Component Interconnect Express (PCIe) bus and includes a Universal Serial Bus (USB) port, an object encrypted with a public key; decrypting, by the HSM, the received object with a private key stored in the HSM, wherein the private key is stored in a secure portion of the HSM; scanning, by the HSM, the object for revocation updates to a security structure of the HSM, wherein the security structure is a monotonically nondecreasing collection of segments containing data on whether a system update is revoked, and wherein a system update's status as revoked in the security structure signifies the revoked system update can no longer be used by the HSM, and wherein the collection of segments is a list of cryptographic hash values corresponding to system update binaries; identifying, by the HSM and based upon scanning the object, a revocation update; verifying, by the HSM, the revocation update was received from the PCIe bus; validating, by the HSM, the revocation update by validating a digital signature of the revocation update; reading, by the HSM, the security structure; determining, by the HSM, the revocation update has not previously been applied to the security structure; calculating, by the HSM, a count value wherein the count value is the number of segments of the security structure application of the revocation update would add; comparing, by the HSM, the count value to a limit condition; resolving, by the HSM, the revocation update by application of the revocation update to the security structure, by adding or changing one or more segments of the security structure identified by the revocation update, in response to determining that the revocation update is valid, determining the revocation update has not previously been applied to the security structure, and determining the count value satisfies the limit condition; searching, by the HSM, the object for a system update; receiving, by the HSM, the system update, wherein the system update is coupled with the object, and wherein the system update is a firmware update; validating, by the HSM, the system update, by comparing data included in the system update with a system update hash to ensure the system update is not corrupted; reading, by the HSM, the security structure; determining, by the HSM and based on reading the security structure, that the security structure indicates that the system update has a status of revoked; denying, by the HSM and based on the determination that the system update has a status of revoked, installation of the system update to the HSM; and outputting a notification to a user, administrator, or a log, by the HSM, of the denial of the installation of the system update to the HSM.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 93.0
- Lexical Diversity: 2.42424
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15718072', '15977177', '15432305', '13036857', '13654344']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2851003868635537
- 35 USC 102 Novelty (BERT): 0.5090847070577886
- Combined Prediction Score: 0.3074988188829772
- Mean Citation Score: 260.720752
- Max Citation Score: 319.73816
- Similarity Product: 301.20153261284355

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test