Trusted container
AssigneeMcAfee, Inc.
InventorsVincent Edward Von Bokern, Purushottam Goel, Sven Schrecker, Ned McArthur Smith
Life of this patent
Estimating the term…
Abstract
A secure identifier is derived, using a secured microcontroller of a computing device, that is unique to a pairing of the computing device and a particular domain. Secure posture data corresponding to attributes of the computing device is identified in secured memory of the computing device. The secure identifier and security posture is sent in a secured container to a management device of the particular domain. The particular domain can utilize the information in the secured container to authenticate the computing device and determine a security task to be performed relating to interactions of the computing device with the particular domain.
Claims29
A method comprising:
- deriving, using a secured microcontroller of a computing device, a secure identifier unique to a pairing of the computing device and a particular domain;
- identifying, in secured memory of the computing device, security posture data corresponding to attributes of the computing device;
- and
- sending the secure identifier and security posture in a secured container to a management device of the particular domain.
A method comprising:
- establishing a secure connection between a particular domain and a particular computing device;
- receiving from the particular computing device a secure identifier for the particular computing device, the secure identifier derived by a secured microcontroller of the particular computing device from authentication data stored in secure memory of the particular computing device;
- receiving security posture data of the particular computing device bound to the particular secure identifier, the security posture identifying attributes of the particular computing device;
- and
- performing a security task relating to interactions of the particular computing device with the particular domain.
At least one machine accessible storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to:
- derive, using a secured microcontroller of a computing device, a secure identifier unique to a pairing of the computing device and a particular domain;
- identify, in secured memory of the computing device, security posture data corresponding to attributes of the computing device;
- and
- send the secure identifier and security posture in a secured container to a management device of the particular domain.
At least one machine accessible storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to:
- participate in a secure connection between a particular domain and a particular computing device;
- receive from the particular computing device a secure identifier for the particular computing device, the secure identifier derived by a secured microcontroller of the particular computing device from authentication data stored in secure memory of the particular computing device;
- receive security posture data of the particular computing device bound to the particular secure identifier, wherein the security posture is to identify attributes of the particular computing device;
- and
- perform a security task relating to interactions of the particular computing device with the particular domain.
A system comprising:
- a system processor device;
- system memory accessible to the system processor device;
- secure management controller memory isolated from the system processor and system memory and storing:
- persistent authentication data;
- and
- security posture data corresponding to attributes of a computing device;
- a secure management microcontroller;
- and
- a management engine adapted, when executed by the management microcontroller, to:
- derive a secure identifier from the authentication data, the secure identifier unique to a pairing of the computing device and a particular domain;
- and
- send the secure identifier and security posture in a secured container to a management device of the particular domain.
Dependencies are inferred from the claim text.