Trust evaluation for a mobile software agent on a trusted computing platform

An apparatus for performing trust evaluation of a mobile software agent on a trusted computing platform, the apparatus comprising:

• a mobile software agent including a virtual trusted platform module (TPM) which is tied to an identity of the mobile software agent;
• and
• a platform TPM;
• wherein the virtual TPM is sent to a receiving entity as part of the mobile software agent if it is determined that the receiving entity is trustworthy.

A method for performing trust evaluation of a mobile software agent on a trusted computing platform, the method comprising:

• a sending entity sending a first request for a platform configuration register (PCR) value and stored measurement log (SML) entries to a receiving entity before sending a mobile software agent to the receiving entity;
• the receiving entity sending a signed PCR value and SML entries to the sending entity;
• the sending entity verifying integrity of the receiving entity based on the signed PCR value and the SML entries received from the receiving entity;
• and
• the sending entity sending the mobile software agent to the receiving entity if integrity of the receiving entity is verified, wherein a virtual trusted platform module (TPM) is part of the mobile software agent, and wherein the virtual TPM is sent to the receiving entity as part of the mobile software agent if it is determined that the receiving entity is trustworthy.

A method for performing trust evaluation of a mobile software agent on a trusted computing platform, the method comprising:

• a mobile software agent residing on a sending entity sending a first request for a platform configuration register (PCR) value and stored measurement log (SML) entries to a receiving entity before the mobile software agent is transferred to the receiving entity;
• the receiving entity sending a signed PCR value and SML entries to the mobile software agent;
• the mobile software agent verifying integrity of the receiving entity based on the signed PCR value and the SML entries received from the receiving entity;
• and
• the sending entity sending the mobile software agent to the receiving entity if integrity of the receiving entity is verified, wherein a virtual trusted platform module (TPM) is part of the mobile software agent, and wherein the virtual TPM is sent to the receiving entity as part of the mobile software agent if it is determined that the receiving entity is trustworthy.