System and method for providing trusted browser verification

A method of verifying the trustworthiness of a browser comprising:

• creating a first set of hashes, the first set of hashes comprising a hash of the browser at a first point in time, the first set of hashes being a known-good set of hashes;
• determining the status of the browser by:
• creating a second set of hashes, the second set of hashes comprising a hash of the browser at a second point in time;
• verifying the second set of hashes to ensure that each hash was created by a trusted source;
• and
• comparing the first set of hashes to the second set of hashes.

A system for providing trusted browser verification comprising:

• a trusted verifier;
• means for maintaining by the trusted verifier a first set of hashes, the first set of hashes comprising a hash of a browser, the first set of hashes being a known-good set of hashes;
• means for receiving by the trusted verifier a browser status request, the browser status request including a second set of hashes, the second set of hashes comprising a second hash of the browser;
• means for verifying by the trusted verifier that each hash in the second set of hashes was created by a trusted source;
• and
• means for determining by the trusted verifier the status of the browser based on the first set of hashes and the second set of hashes.

In a system comprising a root entity, a first participant, a second participant, a first customer of the first participant, a second customer of the second participant, a method for verifying the trustworthiness of a browser in possession of the first customer comprising:

• a) maintaining at a trusted verifier a first set of hashes, the first set of hashes comprising a first hash of the first customer's browser;
• b) generating by the first customer a second set of hashes, the second set of hashes comprising a second hash of the first customer's browser;
• c) transmitting by the first customer the second set of hashes to the second customer;
• d) generating by the second customer a browser status request, the browser status request including the second set of hashes;
• e) transmitting by the second customer the browser status request to the second participant;
• f) forwarding by the second participant the browser status request to the trusted verifier;
• g) determining by the trusted verifier a status of the first customer's browser;
• h) generating by the trusted verifier a browser status response;
• i) forwarding by the trusted verifier the browser status response to the second participant;
• and
• j) transmitting by the second participant the browser status response to the second customer.

A system for verifying the trustworthiness of a browser in possession of a first customer comprising:

• a root entity;
• a first participant;
• a second participant;
• the first customer of the first participant;
• a second customer of the second participant;
• means for maintaining at a trusted verifier a first set of hashes, the first set of hashes comprising a first hash of the first customer's browser;
• means for generating by the first customer a second set of hashes, the second set of hashes comprising a second hash of the first customer's browser;
• means for transmitting by the first customer the second set of hashes to the second customer;
• means for generating by the second customer a browser status request, the browser status request including the second set of hashes;
• means for transmitting by the second customer the browser status request to the second participant;
• means for forwarding by the second participant the browser status request to the trusted verifier;
• means for determining by the trusted verifier a status of the first customer's browser;
• means for generating by the trusted verifier a browser status response;
• means for forwarding by the trusted verifier the browser status response to the second participant;
• and
• means for transmitting by the second participant the browser status response to the second customer.