Support for multiple security policies on a unified authentication architecture

A computer program product comprising a computer-readable device with code thereon for execution by a computer having a memory, a processor datapath, and dedicated initialization hardware, the computer program product code comprising:

• an encrypted kernel, wherein the encrypted kernel is adapted to be decrypted into a decrypted form by the dedicated initialization hardware and executed in the decrypted form by the processor datapath, the encrypted kernel including a secure kernel cryptographic key and instructions executing on the encrypted kernel for:
• providing a key ring of cryptographic keys, wherein at least a subset of the cryptographic keys in the key ring are associated with respective software vendors;
• determining, from an option setting, whether it is desired for the computer to execute only software from approved vendors;
• responsive to determining that it is not desired for the computer to execute only software from approved vendors, including a global public key in the key ring;
• responsive to determining that only software from approved sources should be executed-excluding the global public key in the key ring;
• validating a digital signature of a key-ring cryptographic key using the secure kernel cryptographic key, wherein the key-ring cryptographic key is one of the cryptographic keys in the key ring;
• and
• validating a digital signature of an application-associated cryptographic key using the key-ring cryptographic key, wherein the application-associated cryptographic key is associated with a software application.

A data processing system comprising:

• initialization hardware;
• a processor datapath;
• memory accessible to the processor datapath and the initialization hardware;
• and
• non-volatile storage containing an encrypted copy of a secure kernel having one or more sensitive portions, wherein the initialization hardware decrypts the encrypted copy into the memory, the processor datapath executes the secure kernel from the memory to perform actions that include:
• providing a key ring of cryptographic keys, wherein at least a subset of the cryptographic keys in the key ring are associated with respective software vendors;
• determining, from an option setting, whether it is desired for the data processing system to execute only software from approved vendors;
• responsive to determining that it is not desired for the data processing system to execute only software from approved vendors, including a global public key in the key ring;
• responsive to determining that only software from approved sources should be executed excluding the global public key in the key ring;
• validating a digital signature of a key-ring cryptographic key using the secure kernel cryptographic key, wherein the key-ring cryptographic key is one of the cryptographic keys in the key ring;
• and
• validating a digital signature of an application-associated cryptographic key using the key-ring cryptographic key, wherein the application-associated cryptographic key is associated with a software application.