Patent US6477648B1 successfully refreshed from Google Patents.
US6477648B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Trusted workstation in a networked client/server computing system
Assignee: Apple Inc
•
Filing: 1997-03-23
•
Granted: 2002-11-05
•
Expires: 2017-03-23
Abstract
Abstract A trusted workstation includes a network interface card (NIC) with trusted computing base (TCB) extensions that provide for securely booting the workstation and performing subsequent receive and transmit packet filtering in support of a network's system architecture requirements. The NIC includes a send address confirm circuit which includes a trusted source address (e.g., a MAC address) uniquely associated with the trusted workstation. For each packet to be transmitted from the trusted workstation over the network, the NIC first checks the source address inserted in the packet by the NIC driver running in the user session to be sure that the driver inserted source address is to equal to the trusted address resident. Thus, if untrusted software on the workstation attempts mischiefly transmit a forged packet with a source address other than the trusted source address, the NIC prohibits transmission of the packet with the forged source address. This prevents the trusted workstation from forging its packets with another client's source address. The NIC also includes a receive address confirmation circuit which ensures that the trusted workstation only receives packets from authorized servers.
Inventors
- 👤 Roger R. Schell
- 👤 Douglas Lavell Hale
- 👤 Willard Monten Wiseman
- 👤 James P. Anderson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 10:03
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; G; G06; G06F; G06F21/00; G06F21/70; G06F21/82; H04L61/00; H04L61/35; H04L63/08; H04L63/083; G06F2211/00; G06F2211/009; G06F2211/1097; H04L2101/00; H04L2101/60; H04L2101/618; H04L2101/622; H04L2463/00; H04L2463/062
Claims Analysis
Total Claims: 20
Claim 1
Independent Claim
125 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said computer-executable program instructions comprising identification and authentication instructions for being executed by said computer for identifying and authenticating a computer user entirely during a pre-boot state of said computer, said pre-boot state taking place after said hardware reset and before booting of any operating system in said computer in response to said hardware reset, said computer-executable program instructions also including verification instructions for being executed by said computer during said pre-boot state for verifying a signature of said identification and authentication instructions to detect whether unauthorized modification has been made to said identification and authentication instructions.
Claim 2
Dependent Claim
125 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said computer-executable program instructions comprising identification and authentication instructions for being executed by said computer for identifying and authenticating a computer user entirely during a pre-boot state of said computer, said pre-boot state taking place after said hardware reset and before booting of any operating system in said computer in response to said hardware reset, said computer-executable program instructions also including verification instructions for being executed by said computer during said pre-boot state for verifying a signature of said identification and authentication instructions to detect whether unauthorized modification has been made to said identification and authentication instructions.
Claim 3
Dependent Claim
24 words
A BIOS computer-readable memory according to claim 1 , wherein verification of said signature comprises use of a public key stored in said memory.
Claim 4
Dependent Claim
19 words
A BIOS computer-readable memory according to claim 1 , wherein said memory is a read-only memory in said computer.
Claim 5
Dependent Claim
114 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said program instructions comprising instructions for verifying, entirely during a pre-boot state of said computer, whether at least one pre-boot module of executable program instructions is authentic and for preventing said at least one pre-boot module from being loaded and executed by said computer during said pre-boot state unless a signature of said pre-boot module is verified during said pre-boot state, said pre-boot state taking place after said hardware reset and before booting of any operating system in said computer in response to said hardware reset.
Claim 6
Dependent Claim
114 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said program instructions comprising instructions for verifying, entirely during a pre-boot state of said computer, whether at least one pre-boot module of executable program instructions is authentic and for preventing said at least one pre-boot module from being loaded and executed by said computer during said pre-boot state unless a signature of said pre-boot module is verified during said pre-boot state, said pre-boot state taking place after said hardware reset and before booting of any operating system in said computer in response to said hardware reset.
Claim 7
Dependent Claim
32 words
A BIOS computer-readable memory according to claim 4 , wherein verification of said signature comprises use of a public key associated with a certificate authority, said key being stored in said memory.
Claim 8
Dependent Claim
19 words
A BIOS computer-readable memory according to claim 4 , wherein said memory is a read-only memory in said computer.
Claim 9
Dependent Claim
168 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said computer-executable program instructions comprising instructions for: initiating and controlling downloading of at least one pre-boot module of executable computer program instructions from a server to the computer during a pre-boot state of said computer; verifying a signature of said at least one pre-boot module whereby to detect whether said at least one pre-boot module has been unauthorizedly modified, during said pre-boot state; and if said signature of said at least one module is verified, initiating execution of said at least one pre-boot module in said computer during said pre-boot state; wherein said at least one pre-boot module includes program instructions for identifying and authenticating a user of said computer entirely during said pre-boot state, said pre-boot state taking place after said hardware reset and before booting of any operating system in said computer in response to said hardware reset.
Claim 10
Dependent Claim
168 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said computer-executable program instructions comprising instructions for: initiating and controlling downloading of at least one pre-boot module of executable computer program instructions from a server to the computer during a pre-boot state of said computer; verifying a signature of said at least one pre-boot module whereby to detect whether said at least one pre-boot module has been unauthorizedly modified, during said pre-boot state; and if said signature of said at least one module is verified, initiating execution of said at least one pre-boot module in said computer during said pre-boot state; wherein said at least one pre-boot module includes program instructions for identifying and authenticating a user of said computer entirely during said pre-boot state, said pre-boot state taking place after said hardware reset and before booting of any operating system in said computer in response to said hardware reset.
Claim 11
Dependent Claim
24 words
A BIOS computer-readable memory according to claim 7 , wherein verification of said signature comprises use of a public key stored in said memory.
Claim 12
Dependent Claim
15 words
A BIOS computer-readable memory according to claim 7 , wherein said memory is read-only memory.
Claim 13
Dependent Claim
93 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said program instructions comprising instructions for being executed during a pre-boot state of said computer to verify a signature of a pre-boot module of executable instructions to determine authenticity of said pre-boot module of executable instructions, said pre-boot module of executable instructions being for preventing the computer from booting any operating system unless a user of said computer is successfully authenticated during said pre-boot state.
Claim 14
Dependent Claim
93 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said program instructions comprising instructions for being executed during a pre-boot state of said computer to verify a signature of a pre-boot module of executable instructions to determine authenticity of said pre-boot module of executable instructions, said pre-boot module of executable instructions being for preventing the computer from booting any operating system unless a user of said computer is successfully authenticated during said pre-boot state.
Claim 15
Dependent Claim
24 words
A BIOS computer-readable memory according to claim 10 , wherein verification of said signature comprises use of a master key stored in said memory.
Claim 16
Dependent Claim
16 words
A BIOS computer-readable memory according to claim 10 , wherein said memory is a read-only memory.
Claim 17
Dependent Claim
119 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said program instructions comprising instructions for being executed by said computer entirely during a pre-boot state of said computer for validating a signature of a pre-boot module of instructions whereby to determine authenticity of said module of instructions, said module of instructions being for preventing the computer from communicating with a server unless a user of said computer is successfully authenticated during said pre-boot state, said pre-boot state taking place after said hardware reset and prior to booting of any operating system in said computer in response to said hardware reset.
Claim 18
Dependent Claim
119 words
A BIOS computer-readable memory comprising computer-executable program instructions stored therein for being executed by a computer during initialization of the computer following a hardware reset of said computer, said program instructions comprising instructions for being executed by said computer entirely during a pre-boot state of said computer for validating a signature of a pre-boot module of instructions whereby to determine authenticity of said module of instructions, said module of instructions being for preventing the computer from communicating with a server unless a user of said computer is successfully authenticated during said pre-boot state, said pre-boot state taking place after said hardware reset and prior to booting of any operating system in said computer in response to said hardware reset.
Claim 19
Dependent Claim
33 words
A BIOS computer-readable memory according to claim 13 , wherein validation of said signature comprises use of a root master key associated with a certificate authority, said key being stored in said memory.
Claim 20
Dependent Claim
19 words
A BIOS computer-readable memory according to claim 14 , wherein said memory is a read-only memory in said computer.
References Cited (Backward Citations)
US5202997A
Cited
US5313637A
Cited
US5355489A
Cited
US5204961A
Cited
US5196840A
Cited
US5210795A
Cited
US5448045A
Cited
US5426775A
Cited
US5465357A
Cited
US5710817A
Cited
US5341422A
Cited
US5287519A
Cited
US5349642A
Cited
US5444850A
Cited
US5701491A
Cited
US5828888A
Cited
US5740371A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-11-04 | 2006-05-06 | 2006-11-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-11-04 | 2010-05-06 | 2010-11-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-11-04 | 2014-05-06 | 2014-11-05 | $7700.00 | Window Closed / Lapsed |