Back to results
US 10,320,571 B2Granted
Techniques for authenticating devices using a trusted platform module device
AssigneeMicrosoft Technology Licensing, LLC
InventorsStefan Thom, Artem Alekseyevich Zhurid, Merzin Kapadia
Life of this patent
Estimating the term…
Abstract
Described are examples for authenticating a device including detecting an event related to communications with a trusted platform module (TPM) device, performing, in response to detecting the event, one or more security-related functions with the TPM device, such as generating and/or signing one or more digital certificates, which may be based on one or more keys on the TPM device.
Claims20
A device, comprising:
- a memory storing one or more parameters or instructions for executing a certificate authority service;
- an interface configured to communicate with a removably connectable trusted platform module (TPM) device;
- and
- at least one processor coupled to the memory and the interface, wherein the at least one processor is configured to:
- detect an event corresponding to communications with the TPM device via the interface;
- execute the certificate authority service to generate, in response to detecting the event, a digital certificate for authenticating the device;
- provide, based on detecting the event and generating the digital certificate, the digital certificate to the TPM device for signing;
- obtain the digital certificate, as signed, from the TPM device;
- and
- transmit the digital certificate, as signed, to one or more other devices to authenticate the device in communicating in a network.
7 more elements
A method for authenticating a device, comprising:
- detecting an event related to communications with a removably connectable trusted platform module (TPM) device;
- executing a certificate authority service to generate, in response to detecting the event, a digital certificate;
- providing, based on detecting the event and generating the digital certificate, the digital certificate to the TPM device for signing;
- receiving, based on providing the digital certificate to the TPM device for signing, the digital certificate, as signed, from the TPM device;
- and
- transmitting the digital certificate, as signed, to one or more other devices to authenticate the device in communicating in a network.
3 more elements
A non-transitory computer-readable medium comprising code for authenticating a device, the code comprising:
- code for detecting an event related to communications with a trusted platform module (TPM) device;
- code for executing a certificate authority service to generate, in response to detecting the event, a digital certificate;
- code for providing, based on detecting the event and generating the digital certificate, the digital certificate to the TPM device for signing;
- code for receiving, based on providing the digital certificate to the TPM device for signing, the digital certificate, as signed, from the TPM device;
- and
- code for transmitting the digital certificate, as signed, to one or more other devices to authenticate the device in communicating in a network.
3 more elements
Dependencies are inferred from the claim text.