Method and system for a platform-based trust verifying service for multi-party verification

An article comprising:

• a tangible and non-transitory computer-readable storage medium having a plurality of machine accessible instructions, wherein upon execution of the instructions by an agent execution environment of a computing platform operating an operating system, causes the agent execution environment the computing platform to perform operations including:
• performance of third party certificate provisioning to establish trust between the computing platform and a service provider to authorize the service provider;
• transmission of a request to the authorized service provider to access a service provided by the service provider;
• receipt of a request from the authorized service provider for verification of platform posture information, the request from the authorized service provider being provided by the service provider to the computing platform in response to the request from the computing platform to the service provider to access the service provided by the service provider;
• in response to the request from the authorized service provider,
• establishment of a secure channel with the service provider, the secure channel configured to facilitate retrieval of an integrity manifest for third party code from the service provider;
• generation of the integrity manifest for the third party code of the computing platform that is specific to the authorized service provider;
• comparison of the integrity manifest to a previously known good value;
• determination of the computing platform as having a good platform posture based on said comparison;
• sign an approval of platform posture information;
• and
• sending send the approval to the authorized service provider;
• and
• receive the service from the authorized service provider based on said sending of the approval,
• wherein the agent execution environment is isolated from the operating system and is configured to include a memory area to store measurements related to determination of the platform posture information, and wherein the memory area is inaccessible by the operating system.

A trust verification system comprising:

• a client platform, the client platform having at least one processor,
• wherein the at least one processor operates at least one operating system,
• wherein the at least one operating system includes one or more user applications, a policy manager, and a plurality of third party code,
• wherein the third party code includes measurement downloadable agents specific to service providers,
• wherein the client platform further includes an agent execution environment isolated from the at least one processor and from the operating system,
• wherein the agent execution environment is configured to:
• perform third party certificate provisioning to establish trust between the client device and a service provider;
• and
• in response to a request from a server provider for verification of platform posture information of the client platform, the request received in response to a request communicated from a client platform to the service provider to access a service provided by the service provider,
• establish a secure channel with the service provider, the secure channel configured to facilitate retrieval of an integrity manifest for the third party code from the service provider;
• monitor and measure critical operating system components that demonstrate an overall operating system state of the client platform,
• perform an integrity manifest verification of at least one of the plurality of third party code, and
• inform the service provider as to whether the client platform and the third party code respective of the service provider have been compromised based on the integrity manifest verification
• wherein the agent execution environment is configured to include a memory area to store measurements related to the platform posture information, and wherein the memory area is inaccessible by the operating system.