Method and system to authenticate an application in a computing platform operating in trusted computing group (tcg) domain

A Trusted Platform Module (TPM) system for verifying authenticity of an application in a computing-platform, the TPM system comprising:

• an Operating System (OS) module, wherein the OS module computes at least one integrity measurement corresponding to at least one of the application, a plurality of precedent-applications and an output file, wherein at least one integrity measurement is generated in response to a request generated to verify authenticity of the application, the output file comprises an output of the application, the application is executing on the computing-platform, wherein each precedent-application is executed before the application;
• a TPM, wherein the TPM stores at least one integrity measurement in at least one of a Platform Configuration Register (PCR) of the TPM and a ML;
• and
• a verifier, wherein the verifier compares at least one integrity measurement with re-computed integrity measurements for the application, the re-computed integrity measurements are determined by the verifier based on at least one integrity measurement stored in at least one of a PCR of the TPM and the ML, the request to verify authenticity of the application is generated by the verifier.

A method for verifying authenticity of a computing-platform operating in a Trusted Computing Group (TCG) domain, a plurality of applications are executing on the computing-platform, the method comprising:

• computing at least one integrity measurement corresponding to the plurality of applications executing on the computing-platform;
• searching an Attestation List (AL) of the computing-platform to determine if an entry corresponding to a verifier is present in the AL, wherein the AL corresponds to the verifier;
• computing an incremented-Measurement-log (ML) corresponding to a set of applications, if an entry corresponding to the verifier is present in the AL, wherein the incremented-ML comprises an execution history of a set of applications, the plurality of applications include the set of applications, wherein the set of applications is executed on the computing-platform during a predetermined time period;
• and
• comparing at least one integrity measurement with recomputed-integrity measurements, wherein the re-computed integrity measurements is computed from the execution history of the set of applications stored in the incremented-ML.