Remote attestation model for secure memory applications

A method, implemented at a computer system that includes one or more processors, for instantiating an attestation facilitation component that is enabled to provide verification to an application that is remote from the computer system of a secure state of a secure memory application (SMA) executing upon a secure platform of the computer system regardless of a type of the secure platform and a type of a health attestation service, comprising:

• instantiating an attestation facilitation component, the instantiation comprising:
• identifying at least one property including at least one of
• (i) a particular type of the secure platform upon which the SMA is executing from a plurality of different types of secure platforms and
• (ii) the type of the health attestation service from a plurality of different types of health attestation services;
• customizing the instantiation of the attestation facilitation component with the at least one identified property, the customized instance of the attestation facilitation component performing at least the following:
• verifying that a report generated by the secure platform represents that the secure memory application is operating within the secure platform;
• accessing a token generated by the health attestation service, the generated token representing that the secure platform is operating in a secure state;
• and
• generating a quote that is usable by the remote application to verify that the secure platform and the secure memory application are both operating in secure states, the quote being based on at least a portion of the generated report and a portion of the generated token.

A computer program product comprising one or more hardware storage devices having stored thereon computer-executable instructions that are executable by one or more processors of a computer system to instantiate an attestation facilitation component that is enabled to provide verification to an application that is remote from the computer system of a secure state of a secure memory application (SMA) executing upon a secure platform of the computer system regardless of a type of the secure platform and a type of a health attestation service, the computer-executable instructions including instructions that are executable to cause the computer system to perform at least the following:

• instantiate an attestation facilitation component;
• identify at least one property including at least one of
• (i) a particular type of the secure platform upon which the SMA is executing from a plurality of different types of secure platforms and
• (ii) the type of the health attestation service from a plurality of different types of health attestation services;
• customize the instantiation of the attestation facilitation component with the at least one identified property;
• and
• the customized instance of the attestation facilitation component performing at least the following:
• verifying that a report generated by the secure platform represents that the secure memory application is operating within the secure platform;
• accessing a token generated by the health attestation service, the generated token representing that the secure platform is operating in a secure state;
• and
• generating a quote that is usable by the remote application to verify that the secure platform and the secure memory application are both operating in secure states, the quote being based on at least a portion of the generated report and a portion of the generated token.