System and method for secure initial program load for diskless workstations
May 10, 2013. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.Patent ReferencesOperating system authenticator Apparatus and methods for granting access to computers Tamper-resistant method for authorizing access to data between a host and a predetermined number of attached workstations Method for loading data or program to a plurality of terminal stations Process and apparatus for the protection of secret elements in a network of encrypting devices with open key management Secure file handling in a computer operating system Network license server Distributed security auditing subsystem for an operating system Extended multistation bus system and method Communication security accessing system and process InventorsApplicationNo. 058842 filed on 05/10/1993US Classes:713/155, Central trusted authority provides computer authentication713/162, Having particular address related cryptography713/164Security kernel or utilityExaminersPrimary: Cangialosi, SalvatoreAttorney, Agent or FirmInternational ClassH04L 009/12AbstractA client workstation generates a network request for an initial program load. The request is serviced by a server which preferably includes in the reply to the client the addresses of an authentication server (AS), client, and a secure initial program load server (SECIPL). The client then requests an SECIPL service ticket from the AS, also sending a common identifier known to the AS and the client, preferably stored in the client ROM. This identifier is utilized by the AS to validate the ticket request as originating from a bona fide client, whereupon the ticket is provided by the AS to the client, the SECIPL service ticket is then presented by the client to the SECIPL server which then authenticates that the ticket is bona fide and was received by the client from the AS. The SECIPL then provides a secure kernel to the client, either encrypted with a key known to the SECIPL and client, or otherwise secured by a cryptographic checksum utilizing a key known to the client and the SECIPL. In this manner, the client workstation is thereby assured that an authenticated boot image has been received through potentially non-secure communication links.Other References
| |
