/Patent Tracker
MicrosoftGranted patentSecurity & privacyInterest 4/10

Microsoft patents system that checks device firmware via vendor websites

This patent describes a system that automatically checks if a computer's firmware is authentic by contacting the manufacturer's online servers. The device sends a report about its parts, and the system uses that information to fetch specific checking code from the vendor's website to verify the firmware's validity.

Why it mattersIt offers a more flexible way for devices to prove they are running legitimate software, which is important for preventing tampering with critical hardware components.

In the filing’s own words

Examples of the present disclosure describe devices, systems, and methods for dynamically validating a device's firmware. In examples, an attestation system receives from a platform an attestation report populated with information about components in the platform. The attestation system parses the attestation report to identify web service endpoints associated with a component of the components and initializes a connection with an endpoint of the endpoints. The attestation service receives over the connection a response from the endpoint that includes a code to evaluate the validity of firmware in the component. The attestation service evaluates and confirms the validity of the firmware and transfers the response to the component.

What exactly they claim (claim 1)

1. An attestation system comprising: a processor; and memory comprising computer executable instructions that, when executed, perform operations comprising: receiving, from a platform, an attestation report comprising: information about one or more components of the platform; and an encrypted signature verifying the attestation report is provided by a valid component of the one or more components; parsing the attestation report to identify one or more web service endpoints of a vendor associated with a component of the one or more components based on at least one unique identifier of the one or more components included in the attestation report; initializing a connection with an endpoint of the one or more web service endpoints; receiving, from the endpoint, a response, wherein the response includes executable code to evaluate validity of firmware in the component of the one or more components; evaluating the validity of the firmware of the component by executing the executable code; and upon evaluating the validity of the firmware, transferring an indication of the validity of the firmware to the component.

Facts

Company
Microsoft (Microsoft Technology Licensing, LLC)
Official title
Automatic system for dynamic attestation for device firmware
Patent number
US12762239B2
Application number
18654115
Filed
May 3, 2024
Granted
Oct 13, 2026
Inventors
1
Claims
20

Classified under

G06F 21/572 Physics & computingH04L 9/3247 Electricity & electronicsG06F 2221/033 Physics & computing
Read the full filing (official PDF) ↗ Open in the Patent Tracker

More from Microsoft in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.