Trust verification of a computing platform using a peripheral device
AssigneeAssured Information Security, Inc.
InventorsRian QUINN, Jacob TORREY
Life of this patent
Estimating the term…
Abstract
Verification of trustworthiness of a computing platform is provided. The trustworthiness of the computing platform is dynamically assessed to determine whether a root of trust exists on the computing platform. Responsive to determining existence of the root of trust, data is unsealed from a sealed storage facility. The sealed storage facility is unsealed responsive to a root of trust being determined to exist on the computing platform. The data can be used to attest to the trustworthiness of the computing platform to other device on a network.
Claims22
A system for facilitating verification of trustworthiness of a computing platform, the system comprising:
- a peripheral device configured to couple to the computing platform, the peripheral device comprising:
- a memory;
- and
- a processor in communications with the memory, wherein the peripheral device is configured to facilitate performing a method comprising:
- dynamically assessing trustworthiness of the computing platform, the dynamically assessing comprising determining whether a root of trust exists on the computing platform, the root of trust comprising a trusted execution environment;
- and
- responsive to determining existence of the root of trust on the computing platform, automatically unsealing data from a sealed storage facility of the peripheral device, the sealed storage facility being unsealed responsive to a root of trust being determined by the peripheral device to exist on the computing platform.
A method for facilitating verification of trustworthiness of a computing platform, the method comprising:
- providing a peripheral device configured to couple to the computing platform, the peripheral device comprising a memory and a processor, in communications with the memory, wherein the peripheral device is configured to facilitate performing a method comprising:
- dynamically assessing trustworthiness of the computing platform, the dynamically assessing comprising determining whether a root of trust exists on the computing platform, the root of trust comprising a trusted execution environment;
- and
- responsive to determining existence of the root of trust on the computing platform, automatically unsealing data from a sealed storage facility of the peripheral device, the sealed storage facility being unsealed responsive to a root of trust being determined by the peripheral device to exist on the computing platform.
A computer program product for facilitating verification of trustworthiness of a computing platform by a peripheral device configured to couple to the computing platform, the computer program product comprising:
- a non-transitory storage medium readable by a processor and storing executable instructions for execution by the processor to facilitate performing a method comprising:
- dynamically assessing trustworthiness of the computing platform, the dynamically assessing comprising determining whether a root of trust exists on the computing platform, the root of trust comprising a trusted execution environment;
- and
- responsive to determining existence of the root of trust on the computing platform, automatically unsealing data from a sealed storage facility of the peripheral device, the sealed storage facility being unsealed responsive to a root of trust being determined by the peripheral device to exist on the computing platform.
A method for facilitating verification of trustworthiness of a computing platform, the method comprising:
- dynamically assessing, by a processor of a peripheral device configured to couple to a computing platform, trustworthiness of the computing platform, the dynamically assessing comprising determining whether a root of trust exists on the computing platform, the root of trust comprising a trusted execution environment;
- and
- responsive to determining existence of the root of trust on the computing platform, automatically unsealing data from a sealed storage facility of the peripheral device, the sealed storage facility being unsealed responsive to a root of trust bring determined by the peripheral device to exist on the computing platform.
A method for facilitating verification of trustworthiness of a computing platform, the method comprising:
- issuing, by a processor of a peripheral device coupled to the computing platform, a challenge for execution by the computing platform, the challenge comprising one or more execution steps for producing a challenge response;
- obtaining by the processor a challenge response generated responsive to executing the challenge by the computing platform;
- determining by the processor whether the obtained challenge response matches an expected challenge response known to the peripheral device and unknown to the computing platform, wherein a match between the obtained challenge response and the expected challenge response indicates existence of a root of trust on the computing platform;
- and
- responsive to determining that the obtained challenge response matches the expected challenge response, automatically unsealing data from a sealed storage facility of the peripheral device, the sealed storage facility being unsealed responsive to a root of trust being determined by the peripheral device to exist on the computing platform.
Dependencies are inferred from the claim text.