User-controlled management of TPM identities
AssigneeNokia Corporation
InventorLauri Tarkkala
Life of this patent
Estimating the term…
Abstract
The invention is in the field of security and trustworthy computing. The invention relates to a method for managing identities in a device comprising a trusted platform module. In the method an identity related command is used for performing identity related action; a delegation agent, a storage key for secure storage, and a delegation for the identity related command are created. Further, said delegation is sealed using the created storage key to a trustworthy system state; and the sealed delegation is delivered to the delegation agent.
Claims17
A method for managing identities in a device comprising a trusted platform module, the method comprising
- using an identity related command for performing identity related action;
- creating a delegation agent;
- creating a storage key for secure storage;
- creating a delegation for the identity related command;
- sealing said delegation using the created storage key to a trustworthy system state;
- and
- delivering the sealed delegation to the delegation agent.
A trusted platform module comprising
- a storage;
- a first component for using an identity related command for performing identity related action;
- a second component for creating a delegation agent;
- a third component for creating a storage key for secure storage;
- a fourth component for creating a delegation for the identity related command;
- a fifth component for sealing said delegation using the created storage key to a trustworthy system state;
- and
- a sixth component for delivering the sealed delegation to the delegation agent.
An electronic device comprising a trusted platform module comprising a storage;
- a first component for using an identity related command for performing identity related action;
- a second component for creating a delegation agent;
- a third component for creating a storage key for secure storage;
- a fourth component for creating a delegation for the identity related command;
- a fifth component for sealing said delegation using the created storage key to a trustworthy system state;
- and
- a sixth component for delivering the sealed delegation to the delegation agent.
A system comprising
- an electronic device;
- a communication network;
- and
- a remote device;
- wherein the electronic device comprises a trusted platform module comprising
- a storage;
- a first component for using an identity related command for performing identity related action;
- a second component for creating a delegation agent;
- a third component for creating a storage key for secure storage;
- a fourth component for creating a delegation for the identity related command;
- a fifth component for sealing said delegation using the created storage key to a trustworthy system state;
- and
- a sixth component for delivering the sealed delegation to the delegation agent.
A computer program product carrying program code for managing identities in a device comprising a trusted platform module, the program code comprising instructions for
- using an identity related command for performing identity related action;
- creating a delegation agent;
- creating a storage key for secure storage;
- creating a delegation for the identity related command;
- sealing said delegation using the created storage key to a trustworthy system state;
- and
- delivering the sealed delegation to the delegation agent.
Dependencies are inferred from the claim text.