Attestable and destructible device identity
AssigneeMicrosoft Technology Licensing, LLC
InventorChristopher E. FENNER
Life of this patent
Estimating the term…
Abstract
Implementations described herein disclose a device identity management system using a trusted platform module (TPM) of a device. The device identity management system provides one or more computer executable instructions to receive a secret random number at a trusted platform module (TPM) of a device, generate a hash of an existing device identity stored in a non-volatile (NV) identity index using the secret random number, and store the hash as the device identity in the NV identity index.
Claims20
A physical article of manufacture including one or more tangible computer-readable storage media, encoding computer-executable instructions for executing on a computer system a computer process to provide attestable and destructible device identity, the computer process comprising:
- receiving a secret random number at a trusted platform module (TPM) of a device;
- generating a hash of an existing device identity stored in a non-volatile (NV) identity index using the secret random number;
- and
- storing the hash as the device identity in the NV identity index.
In a computing environment, a method performed at least in part on at least one processor, the method comprising:
- receiving a secret random number at a trusted platform module (TPM) of a device;
- generating a hash of an existing device identity stored in a non-volatile (NV) identity index using the secret random number;
- and
- storing the hash as the device identity in the NV identity index.
In a computing environment, a system comprising:
- memory;
- one or more processor units;
- a device identity management system stored in the memory and executable by the one or more processor units, the device identity management system encoding computer-executable instructions on the memory for executing on the one or more processor units a computer process to provide malware sequence detection, the computer process comprising:
- receiving a secret random number at a trusted platform module (TPM) of a device;
- generating a hash of an existing device identity stored in a non-volatile (NV) identity index using the secret random number;
- and
- storing the hash as the device identity in the NV identity index.
Dependencies are inferred from the claim text.