US5349643A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for secure initial program load for diskless workstations
Assignee: International Business Machines Corp
•
Filing: 1993-05-10
•
Granted: 1994-09-20
•
Expires: 2013-05-10
Abstract
Abstract A client workstation generates a network request for an initial program load. The request is serviced by a server which preferably includes in the reply to the client the addresses of an authentication server (AS), client, and a secure initial program load server (SECIPL). The client then requests an SECIPL service ticket from the AS, also sending a common identifier known to the AS and the client, preferably stored in the client ROM. This identifier is utilized by the AS to validate the ticket request as originating from a bona fide client, whereupon the ticket is provided by the AS to the client, the SECIPL service ticket is then presented by the client to the SECIPL server which then authenticates that the ticket is bona fide and was received by the client from the AS. The SECIPL then provides a secure kernel to the client, either encrypted with a key known to the SECIPL and client, or otherwise secured by a cryptographic checksum utilizing a key known to the client and the SECIPL. In this manner, the client workstation is thereby assured that an authenticated boot image has been received through potentially non-secure communication links.
Inventors
- 👤 James O. Cox
- 👤 James M. Mott
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 09:15
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/50; G06F21/57; G06F21/575; G06F21/30; G06F21/31; G06F21/33; G06F9/00; G06F9/06; G06F9/44; G06F9/4401; G06F9/4416; H; H04; H04L; H04L9/00; H04L9/32; H04L9/321; H04L9/3213; H04L9/3271; G06F12/00; G06F12/14; G06F12/1408; G06F2211/00; G06F2211/007; G06F2211/1097; G06F2221/00; G06F2221/21; G06F2221/2151
Claims Analysis
Total Claims: 29
Claim 1
Independent Claim
135 words
A method executed by a computer system comprised of a client and a server in a network for providing a secure operating system comprising storing a shared key at said client; communicating signals across said network comprising a request including said shared key from said client to said server interconnected by said network for activating said operating system at said client; authenticating said request at said server; communicating signals across said network comprising a response from said server to said client in response to said authenticated said request, said response from said server including at least a portion of said operating system; authenticating said at least a portion of said operating system at said client with said shared key; and activating said operating system at said client in response to said response from said server.
Claim 2
Independent Claim
135 words
A method executed by a computer system comprised of a client and a server in a network for providing a secure operating system comprising storing a shared key at said client; communicating signals across said network comprising a request including said shared key from said client to said server interconnected by said network for activating said operating system at said client; authenticating said request at said server; communicating signals across said network comprising a response from said server to said client in response to said authenticated said request, said response from said server including at least a portion of said operating system; authenticating said at least a portion of said operating system at said client with said shared key; and activating said operating system at said client in response to said response from said server.
Claim 3
Dependent Claim
18 words
The method of claim 1 wherein said authenticating said request is a precondition to said communicating said response.
Claim 4
Dependent Claim
19 words
The method of claim 1 further including the step of authenticating at said client said response from said server.
Claim 5
Dependent Claim
19 words
The method of claim 3 wherein said authenticating said response is a precondition to said activating said operating system.
Claim 6
Dependent Claim
37 words
The method of claim 1 wherein said response from said server comprises said at least a portion of said operating system encrypted prior to said communicating said response and decrypted prior to said activating said operating system.
Claim 7
Dependent Claim
20 words
The method of claim 5 wherein said operating system is decrypted and encrypted by said client and said server, respectively.
Claim 8
Dependent Claim
27 words
The method of claim 1 wherein said response further comprises a cryptographic checksum of said at least a portion of said operating system verifiable by said client.
Claim 9
Independent Claim
212 words
A method executed by a computer system for providing a secure operating environment at a client station, comprising storing a service key at a secure boot server; generating a request for a secure boot image from said client to a boot server; receiving a response from said boot server by said client; communicating a request encoded by a key known by said client and an authentication server, corresponding in part to said boot server response, by said client to said authentication server for a token for said secure boot image comprised of at least said service key and a shared key; storing said shared key at said client; communicating said token from said authentication server to said client in response to said request; communicating said token from said client to said secure boot server; verifying said token with said service key at said secure boot server; communicating to said client from said secure boot server, in response to said verifying, at least a portion of an operating system authenticatable by said client with said shared key; authenticating said at last a portion of said operating system by said client with said shared key; and executing by said client said at least a portion of said operating system in response to said authenticating.
Claim 10
Independent Claim
212 words
A method executed by a computer system for providing a secure operating environment at a client station, comprising storing a service key at a secure boot server; generating a request for a secure boot image from said client to a boot server; receiving a response from said boot server by said client; communicating a request encoded by a key known by said client and an authentication server, corresponding in part to said boot server response, by said client to said authentication server for a token for said secure boot image comprised of at least said service key and a shared key; storing said shared key at said client; communicating said token from said authentication server to said client in response to said request; communicating said token from said client to said secure boot server; verifying said token with said service key at said secure boot server; communicating to said client from said secure boot server, in response to said verifying, at least a portion of an operating system authenticatable by said client with said shared key; authenticating said at last a portion of said operating system by said client with said shared key; and executing by said client said at least a portion of said operating system in response to said authenticating.
Claim 11
Dependent Claim
19 words
The method of claim 8 wherein said response from said boot server includes an address of said boot server.
Claim 12
Dependent Claim
20 words
The method to claim 9 wherein said response from said boot server further includes an address of said authentication server.
Claim 13
Dependent Claim
41 words
The method of claim 10 wherein said request by said client to said authentication server includes a unique principal name of said boot server known to said client and to said authentication server and stored in non-volatile memory of said client.
Claim 14
Independent Claim
191 words
A method executed by a computer system including at least one client workstation interconnected to a network for providing an authenticated operating system at said client workstation comprising specifying a first key, a service key, and a shared key; transmitting onto said network a first request from said client workstation for an operating environment; authenticating said first request received from said network with said first key; transmitting a token corresponding to said first key, said service key and said shared key onto said network, and to said client in response to said authenticating said receiving first request; transmitting onto said network a second request functionally related to said token from said client workstation for said operating environment; authenticating said second request received from said network with said service key; transmitting information at least partially encrypted with said shared key onto said network and to said client workstation in response to said authenticating said received second request; decrypting said at least partially encrypted information at said client with said shared key; and executing said operating environment at said client workstation in response to said decrypting of said at least partially encrypted information.
Claim 15
Independent Claim
191 words
A method executed by a computer system including at least one client workstation interconnected to a network for providing an authenticated operating system at said client workstation comprising specifying a first key, a service key, and a shared key; transmitting onto said network a first request from said client workstation for an operating environment; authenticating said first request received from said network with said first key; transmitting a token corresponding to said first key, said service key and said shared key onto said network, and to said client in response to said authenticating said receiving first request; transmitting onto said network a second request functionally related to said token from said client workstation for said operating environment; authenticating said second request received from said network with said service key; transmitting information at least partially encrypted with said shared key onto said network and to said client workstation in response to said authenticating said received second request; decrypting said at least partially encrypted information at said client with said shared key; and executing said operating environment at said client workstation in response to said decrypting of said at least partially encrypted information.
Claim 16
Dependent Claim
21 words
The method of claim 12 wherein said authenticating said received first request is by an authorization server attached to said network.
Claim 17
Dependent Claim
14 words
The method of claim 13 wherein said token is transmitted from said authentication server.
Claim 18
Dependent Claim
25 words
The method of claim 13 wherein said authenticating said received second request is by a secure initial program load (SECIPL) server attached to said network.
Claim 19
Dependent Claim
22 words
The method of claim 15 wherein said at least partially encrypted information is transmitted from said SECIPL server to said client workstation.
Claim 20
Dependent Claim
26 words
The method of claim 16 wherein said at least partially encrypted information comprises at least part of an encrypted operating system decryptable by said client workstation.
Claim 21
Dependent Claim
37 words
The method of claim 16 wherein said at least partially encrypted information comprises a cryptographic checksum, decryptable by said client, of at least a part of an operating system transmitted from said SECIPL server to said client.
Claim 22
Independent Claim
119 words
A system for providing a secure operating system for a client in a network environment, comprising authentication server means interconnected to said network for authenticating a request from said client for said operating system and providing to said client an indicator of authenticating; secure program load server means interconnected to said network for determining said client has received said indicator and transmitting encrypted data including at least a portion of an operating system on said network to said client in response to said determining; and said network to said client in response to said determining; and client workstation means interconnected to said network for executing said secure operating system in response to unencrypting of said data by said client.
Claim 23
Independent Claim
119 words
A system for providing a secure operating system for a client in a network environment, comprising authentication server means interconnected to said network for authenticating a request from said client for said operating system and providing to said client an indicator of authenticating; secure program load server means interconnected to said network for determining said client has received said indicator and transmitting encrypted data including at least a portion of an operating system on said network to said client in response to said determining; and said network to said client in response to said determining; and client workstation means interconnected to said network for executing said secure operating system in response to unencrypting of said data by said client.
Claim 24
Dependent Claim
19 words
The system of claim 19 wherein said client workstation means includes means for transmitting said request onto said network.
Claim 25
Dependent Claim
20 words
The system of claim 20 wherein said client workstation means further includes means for receiving said indicator from said network.
Claim 26
Dependent Claim
46 words
The system of claim 21 wherein said client means further includes means for transmitting on said network to said secure program load means information in response to said client workstation means receiving said indicator, from which said determining by said secure program load means is performed.
Claim 27
Dependent Claim
18 words
The system of claim 19 wherein said encrypted data is a cryptographic checksum corresponding to said operating system.
Claim 28
Independent Claim
123 words
A system for providing a secure operating system for a client in a network environment, comprising authentication server means interconnected to said network for authenticating a request from said client for said operating system and providing to said client an indicator of authenticating; secure program load server means interconnected to said network for determining said client has received said indicator and transmitting at least a portion of an operating system and a cryptographic checksum of said portion of said operating system on said network to said client in response to said determining; and client workstation means interconnected to said network for executing said secure operating system in response to authenticating said portion of said operating system with said cryptographic checksum by said client.
Claim 29
Independent Claim
123 words
A system for providing a secure operating system for a client in a network environment, comprising authentication server means interconnected to said network for authenticating a request from said client for said operating system and providing to said client an indicator of authenticating; secure program load server means interconnected to said network for determining said client has received said indicator and transmitting at least a portion of an operating system and a cryptographic checksum of said portion of said operating system on said network to said client in response to said determining; and client workstation means interconnected to said network for executing said secure operating system in response to authenticating said portion of said operating system with said cryptographic checksum by said client.
References Cited (Backward Citations)
US3996449A
Cited
US4799258A
Cited
US4969188A
Cited
US4958278A
Cited
US5023907A
Cited
US4984272A
Cited
US4941175A
Cited
US5067154A
Cited
US5053947A
Cited
US5056140A
Cited
US5032979A
Cited
US5210795A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-09-19 | 1998-03-21 | 1998-09-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-09-19 | 2002-03-21 | 2002-09-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-09-19 | 2006-03-21 | 2006-09-20 | $7700.00 | Window Closed / Lapsed |