Method and apparatus for remotely provisioning software-based security coprocessors
AssigneeIntel Corporation
InventorVincent R. Scarlata
Life of this patent
Estimating the term…
Abstract
A virtual security coprocessor is created in a first processing system. The virtual security coprocessor is then transferred to a second processing system, for use by the second processing system. For instance, the second processing system may use the virtual security coprocessor to provide attestation for the second processing system. In an alternative embodiment, a virtual security coprocessor from a first processing system is received at a second processing system. After receiving the virtual security coprocessor from the first processing system, the second processing system uses the virtual security coprocessor. Other embodiments are described and claimed.
Claims20
At least one non-transitory machine-readable storage medium including instructions that if executed cause a first processing system to:
- create a virtual trusted platform module for a virtual machine of the first processing system;
- facilitate creation of an endorsement key for the virtual trusted platform module, wherein the endorsement key is to be stored in a storage;
- migrate the virtual trusted platform module to a second processing system, the virtual trusted platform module migration to send a state of the virtual trusted platform module to the second processing system, the state of the virtual trusted platform module including the endorsement key;
- and
- delete information associated with the virtual trusted platform module from the first processing system.
A system comprising:
- a first processing system;
- first hardware logic of the first processing system to support creation of a first virtual machine for the first processing system;
- second hardware logic of the first processing system to create a first virtual trusted platform module for the first virtual machine and to facilitate creation of an endorsement key for the first virtual trusted platform module;
- and
- third hardware logic of the first processing system to cause migration of the first virtual trusted platform module from the first processing system to a second processing system, wherein the first virtual trusted platform module migration is to include a state of the first virtual trusted platform module, the state of the first virtual trusted platform module including the endorsement key.
A method comprising:
- creating a virtual trusted platform module for a virtual machine of a first processing system;
- facilitating creation of an endorsement key for the virtual trusted platform module, and storing the endorsement key in a storage;
- migrating the virtual trusted platform module to a second processing system, the virtual trusted platform module migration to send a state of the virtual trusted platform module to the second processing system, the state of the virtual trusted platform module including the endorsement key;
- and
- deleting information associated with the virtual trusted platform module from the first processing system.
Dependencies are inferred from the claim text.