Method for securely configuring an information system

Patent metadata

Field	Value
Publication number	US-11797313-B2
Application number	US-202016921101-A
Country	US
Kind code	B2
Filing date	Jul 6, 2020
Priority date	Nov 29, 2017
Publication date	Oct 24, 2023
Grant date	Oct 24, 2023

Abstract

Systems, method, and non-transitory computer readable storage medium are provided for configuring an information computing machine during execution of a kernel image. The system can create a file system from a base file system image in system memory of the computing system, apply configuration files from a bundle image to the file system in memory, copy files from a persistent file system stored in the storage resource to memory, validate the files from the persistent file system, and apply validated files to the file system in memory. The base file system image and bundle image can be verified by comparing a signed hash of the image with a hash generated by the initial file system and checking the hash signature against a public certificate included in the initial filesystem. The system can further execute /sbin/init and start application services.

First claim

What is claimed is:

1. A system comprising:
a hardware storage resource;
a hardware processor communicatively coupled to the storage resource, wherein the processor executes application code instruction that are stored in the storage resource to cause the system to:
compare a signed hash of a file system configuration image with a hash generated using a file system, wherein the file system includes a memory file system module, a base file system image and the file system configuration image;
check the signed hash against a public certificate included in the file system; and
verify the file system configuration image by determining if the signed hash has been signed by an administrator.

2. The system of claim 1 further comprising application code instruction to cause the system to determine if the hash has been validated against a white list.

3. The system of claim 1 further comprising application code instruction to cause the system to verify the base file system image by comparing a signed hash of the base file system image that includes a plurality of digital signatures with a hash generated by an initial file system.

4. The system of claim 3 further comprising application code instruction to cause the system to check the plurality of digital signatures against public certificates included in the initial file system.

5. The system of claim 1 wherein the base file system image can be retrieved from a local storage resource or from a remote storage resource.

6. The system of claim 1 wherein the file system configuration image can be retrieved from a local storage resource or from a remote storage resource.

7. The system of claim 1 further comprising application code instruction to cause the system to:
execute /sbin/init; and
start services.

8. A method comprising:
comparing, with a data processing system, a signed hash of a file system configuration image with a hash generated using a file system, wherein the file system includes a memory file system module, a base file system image and the file system configuration image;
checking the signed hash against a public certificate included in the file system using the data processing system; and
verifying the file system configuration image by determining if the signed hash has been signed by an administrator using the data processing system.

9. The method of claim 8 further comprising determining if the hash has been validated against a white list using the data processing system.

10. The method of claim 8 further comprising verifying the base file system image by comparing a signed hash of the base file system image that includes a plurality of digital signatures with a hash generated by an initial file system using the data processing system.

11. The method of claim 10 further comprising causing the data processing system to check the plurality of digital signatures against public certificates included in the initial file system.

12. The method of claim 8 further comprising retrieving the base file system image from a local storage resource or from a remote storage resource.

13. The method of claim 8 further comprising retrieving the file system configuration image from a local storage resource or from a remote storage resource.

14. The method of claim 8 further comprising:
executing /sbin/init using the data processing system; and
starting services using the data processing system.

15. A non-transitory computer readable medium containing computer readable instructions for configuring an information computing machine, the computer readable instructions comprising instructions for causing the information computing machine to:
compare a signed hash of a file system configuration image with a hash generated using a file system, wherein the file system includes a memory file system module, a base file system image and the file system configuration image;
check the signed hash against a public certificate included in the file system; and
verify the file system configuration image by determining if the signed hash has been signed by an administrator.

16. The non-transitory computer readable medium of claim 15 further includes computer readable instruction to cause the information computing machine to determine if the hash has been validated against a white list.

17. The non-transitory computer readable medium of claim 15 further includes computer readable instruction to cause the information computing machine to verify the base file system image by comparing a signed hash of the base file system image that includes a plurality of digital signatures with a hash generated by an initial file system.

18. The non-transitory computer readable medium of claim 17 further includes computer readable instruction to cause the information computing machine to check the plurality of digital signatures against public certificates included in the initial file system.

19. The non-transitory computer readable medium of claim 15 further includes computer readable instruction to cause the information computing machine to execute /sbin/init.

20. The non-transitory computer readable medium of claim 19 further includes computer readable instruction to cause the information computing machine to start services.

Assignees

• Forcepoint Llc
• Forcepoint Fed Holdings Llc

Inventors

• Malone Ii Mickey J
• Minnis Jacob

Classifications

• G06F9/44505 Primary

  Configuring for program initiating, e.g. using registry, configuration files · CPC title

• G06F21/51

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title

• G06F21/575

  Secure boot · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title