Back to results
US 8,429,423 B1Granted
Trusted platform modules
AssigneeOracle America, Inc.
InventorsJames E. King, Rhod J. Jones
Life of this patent
Estimating the term…
Abstract
A method of porting of trust data includes a computer system extracting trust data from the trust module using a manufacturer key. The trust data and the manufacturer key are then stored, encrypted with a control key, on a removable storage medium.
Claims22
A method of enabling the porting of trust data secured in a trust module of a computer system using a manufacturer key, the method comprising:
- a) extracting the trust data from the trust module using the manufacturer key;
- b) storing the trust data and the manufacturer key, encrypted with a control key, on a removable storage medium, wherein the control key and the manufacturer key are preprogrammed into the system controller;
- and
- c) monitoring for changes to the trust data in the trust module and, in response to detecting a change in the trust data, repeating steps (a), (b), and (c).
1 more element
A computer system, comprising:
- a trust module, in which trust data is secured using a manufacturer key;
- a system controller coupled to the trust module, wherein the system controller is operable to:
- extract the trust data from the trust module using the manufacturer key;
- store the trust data and the manufacturer key, encrypted with a control key, on a removable storage medium, wherein system controller is preprogrammed with the control key and the manufacturer key;
- wherein the computer system is operable to:
- monitor the trust module for changes to the trust data;
- and
- in response to detecting a change in the trust data, repeat said extracting of the trust data from the trust module using the manufacturer key, said storing of the trust data and the manufacturer key, encrypted with a control key, on the removable storage medium, and said monitoring of the trust module for changes to the trust data.
5 more elements
A method of enabling the porting of trust data secured in a trust module of a computer system using a manufacturer key, the method comprising:
- a) extracting the trust data from the trust module using the manufacturer key, wherein, in step (a), a system controller of the computer system extracts the trust data from the trust module using the manufacturer key;
- b) storing the trust data and the manufacturer key, encrypted with a control key, on a removable storage medium, wherein in step (b), the system controller stores the trust data and the manufacturer key encrypted with a control key on the removable storage medium;
- and
- c) monitoring for changes to the trust data in the trust module, wherein step (c) comprises a bus controller monitoring for access to a bus to which the trust module is connected;
- and
- d) in response to detecting a change in the trust data, repeating steps (a), (b), and (c).
3 more elements
A method of enabling the porting of trust data secured in a trust module of a computer system using a manufacturer key, the method comprising:
- a) extracting the trust data from the trust module using the manufacturer key;
- b) storing the trust data and the manufacturer key, encrypted with a control key, on a removable storage medium;
- and
- c) monitoring for changes to the trust data in the trust module and, in response to detecting a change in the trust data, repeating steps (a), (b), and (c);
- d) removing the removable storage medium from the computer system and providing the removable storage medium to a replacement computer system;
- e) the replacement computer system, which is preprogrammed with the control key, extracting the trust data and the manufacturer key from the removable storage medium using the control key;
- and
- f) programming a trust module of the replacement computer system using the trust data encrypted using the manufacturer key.
5 more elements
A computer system, comprising:
- a trust module, in which trust data is secured using a manufacturer key;
- a bus coupled to the trust module;
- a bus controller operable to:
- control the bus;
- and
- monitor for access to the trust module via the bus;
- a system controller coupled to the trust module, wherein the system controller is operable to:
- extract the trust data from the trust module using the manufacturer key;
- store the trust data and the manufacturer key, encrypted with a control key, on a removable storage medium;
- wherein the computer system is operable to:
- monitor the trust module for changes to the trust data;
- and
- in response to detecting a change in the trust data, repeat said extracting of the trust data from the trust module using the manufacturer key, said storing of the trust data and the manufacturer key, encrypted with a control key, on the removable storage medium, and said monitoring of the trust module for changes to the trust data;
- wherein the bus controller is further operable to inform the system controller on detecting trust module access via the bus, and subsequent thereto, the system controller is operable to request the bus controller for access to the trust module via the bus prior to access to the trust module.
11 more elements
Dependencies are inferred from the claim text.