Method and apparatus for remotely provisioning software-based security coprocessors

A method comprising:

• receiving, at a first processing system, a virtual security coprocessor from a second processing system and an endorsement credential created by the second processing system for the virtual security coprocessor;
• and
• after receiving the virtual security coprocessor from the second processing system, using the virtual security coprocessor to provide at least one operation from the group of operations consisting of:
• providing attestation for the first processing system;
• and
• encrypting data for the first processing system.

An apparatus comprising:

• a storage medium;
• and
• instructions stored in the storage medium, wherein the instructions, when executed by a first processing system, cause the first processing system to perform operations comprising:
• creating a virtual security coprocessor in the first processing system;
• generating, in the first processing system, an endorsement credential for the virtual security coprocessor, and signing the endorsement credential in the first processing system;
• and
• transferring the virtual security coprocessor to a second processing system for use by the second processing system, and transmitting the endorsement credential to the second processing system.

An apparatus comprising:

• a storage medium;
• and
• instructions stored in the storage medium, wherein the instructions, when executed by a first processing system, cause the first processing system to perform operations comprising:
• receiving a virtual security coprocessor from a second processing system and an endorsement credential created by the second processing system for the virtual security coprocessor;
• and
• after receiving the virtual security coprocessor from the second processing system, using the virtual security coprocessor to provide at least one operation from the group of operations consisting of:
• providing attestation for the first processing system;
• and
• encrypting data for the first processing system.

A processing system comprising:

• a processor;
• a storage medium communicatively coupled to the processor;
• and
• instructions stored in the storage medium, wherein the instructions, when executed by a first processing system, cause the first processing system to perform operations comprising:
• creating a virtual security coprocessor in the first processing system;
• generating, in the first processing system, an endorsement credential for the virtual security coprocessor, and signing the endorsement credential in the first processing system;
• and
• transferring the virtual security coprocessor to a second processing system for use by the second processing system, and transmitting the endorsement credential to the second processing system.

A processing system comprising:

• a processor;
• a storage medium communicatively coupled to the processor;
• and
• instructions stored in the storage medium, wherein the instructions, when executed by a first processing system, cause the first processing system to perform operations comprising:
• receiving, at the first processing system, a virtual security coprocessor from a second processing system and an endorsement credential created by the second processing system for the virtual security coprocessor;
• and
• after receiving the virtual security coprocessor from the second processing system, using the virtual security coprocessor to provide at least one operation from the group of operations consisting of:
• providing attestation for the first processing system;
• and
• encrypting data for the first processing system.