Jonathan J Mccune

US Patent:

8627414, Jan 7, 2014

Filed:

Mar 9, 2010

Appl. No.:

12/720008

Inventors:

Jonathan M. McCune - Pittsburgh PA, US
Adrian M. Perrig - Pittsburgh PA, US
Anupam Datta - Pittsburgh PA, US
Virgil Dorin Gligor - Pittsburgh PA, US
Yanlin Li - Pittsburgh PA, US
Bryan Jeffrey Parno - Pittsburgh PA, US
Amit Vasudevan - Pittsburgh PA, US
Ning Qu - San Jose CA, US

Assignee:

Carnegie Mellon University - Pittsburgh PA

International Classification:

G06F 7/04
G06F 12/14
H04L 29/06
H04L 9/32
G06F 15/167
G06F 15/16

US Classification:

726 4, 726 7, 726 23, 726 27, 713165, 713166, 713168, 709212, 709217

Abstract:

A computer including a processor and a verification device. The processor in the computer performs the steps of authenticating a secure connection between a hypervisor and the verification device, measuring the identity of at least a portion of a select guest before the select guest executes any instruction, and sending a measurement of the identity of the select guest to the verification device. The verification device compares the policy stored in the verification device with the measurement of the select guest received by the verification device. The steps of authenticating, measuring, sending, and comparing are performed after receiving a signal indicative of a request to execute the select guest and without rebooting the computer.

US Patent:

20120198514, Aug 2, 2012

Filed:

Jun 29, 2010

Appl. No.:

13/389212

Inventors:

Jonathan M. McCune - Pittsburgh PA, US
Adrian M. Perrig - Pittsburgh PA, US
Anupam Datta - Pittsburgh PA, US
Virgil D. Gligor - Pittsburgh PA, US
Ning Qu - San Jose CA, US

Assignee:

CARNEGIE MELLON UNIVERSITY - Pittsburgh PA

International Classification:

G06F 21/00

US Classification:

726 1

Abstract:

An apparatus and method for establishing a trusted path between a user interface and a trusted executable, wherein the trusted path includes a hypervisor and a driver shim. The method includes measuring an identity of the hypervisor; comparing the measurement of the identity of the hypervisor with a policy for the hypervisor; measuring an identity of the driver shim; comparing the measurement of the identity of the driver shim with a policy for the driver shim; measuring an identity of the user interface; comparing the measurement of the identity of the user interface with a policy for the user interface; and providing a human-perceptible indication of whether the identity of the hypervisor, the identity of the driver shim, and the identity of the user interface correspond with the policy for the hypervisor, the policy for the driver shim, and the policy for the user interface, respectively.