Software root of trust

A software system that transforms an original application into an STPM enabled application and runs the STPM enabled application, the software system comprising:

• an anti-tamper tool used at protect time for accepting an original application and creating the STPM enabled application, the anti-tamper tool initially implementing anti-tamper techniques on the original application to create a guarded application;
• a security wrapper created at protect time by the anti-tamper tool in accordance with a policy file specifying security and usage restrictions for the original application, the security wrapper wrapping the guarded application to create the STPM enabled application;
• a trusted service provider inserted at protect time by the anti-tamper tool at the entry point of the STPM enabled application;
• a set of core services made accessible to the STPM enabled application through the trusted service provider;
• and
• an STPM device driver implementing trusted platform module functionality, the STPM device driver being protected by anti-tamper techniques;
• wherein at runtime the trusted service provider creates a TSP thread and passes a security file based on the policy file to the STPM device driver, the TSP thread actively monitoring the enabled application and interacting with the STPM device driver through the set of core services.