Renting a computing environment on a trusted computing platform

• US 20020194132A1
• Filed: 06/18/2002
• Published: 12/19/2002
• Est. Priority Date: 06/19/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Pearson, Siani Lynne, Chu, Alex
• Application Number:
  US10/175,185
• Publication Number:
  US 20020194132A1
• Time in Patent Office: Days
• US Class Current: 705/52
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

A computing platform rents a computing environment to execute a process supplied from a user device. Integrity of the computing platform is verified using a trusted device which obtains an integrity metric particularly of the host operating system during start up. The computing environment is confirmed as being suitable for the requirements of the process, and then verified ideally again using an integrity metric of the computing environment produced by the trusted device. The user process is then supplied from the user device to the computing environment.

Claims

1. A method for renting a computing environment in a computing platform, comprising the steps of:

(a) verifying integrity of the computing platform;

(b) confirming that a suitable computing environment is available for rent from the computing platform;

(c) verifying integrity of the computing environment; and

(d) supplying a user process for execution within the computing environment.

2. The method of claim 1, wherein the step (a) comprises communicating with a trusted device of the computing platform to establish that the computing platform is a trusted computing platform.

3. The method of claim 2, wherein the trusted device forms an integrity metric of the computing platform.

4. The method of claim 1, wherein the step (b) comprises confirming that the computing environment is a compartment.

5. The method of claim 4, wherein the compartment is an application level compartment.

6. The method of claim 4, wherein the compartment is an operating system compartment.

7. The method of claim 4, wherein the step (b) comprises confirming that the computing environment has exclusive access to the compartment.

8. The method of claim 1, wherein the step (c) comprises communicating with a trusted device of the computing platform to receive an integrity metric of the computing environment.

9. The method of claim 8, wherein the step (c) includes confirming that the trusted device has control over input and/or output of the computing environment.

10. The method of claim 1, wherein the step (d) comprises executing the user process in the computing environment.

11. The method of claim 1, comprising the step (e) of periodically repeating verification of the computing environment.

12. The method of claim 1, comprising the step (f) of verifying the user process supplied in the step (d).

13. The method of claim 12, wherein the step (f) comprises verifying that the user process has not been altered since being supplied to the computing environment in step (d).

14. The method of claim 12, wherein the step (f) is repeated periodically.

15. The method of claim 1, comprising the step (g) of cleaning the computing environment.

16. The method of claim 15, comprising the step of (h) verifying that the computing environment has been cleaned.

17. The method of claim 1, wherein the method is performed by a user device coupled to the computing platform.

19. The user device of claim 18, wherein the user device communicates with a trusted device of the computing platform to receive an integrity metric of the computing platform.

20. The user device of claim 18, wherein the user device confirms that the computing environment is a compartment.

21. The user device of claim 18, wherein the user device communicates with a trusted device of the computing platform to receive an integrity metric of the computing environment.

22. The user device of claim 18, wherein the user device periodically repeats verification of the computing environment.

23. The user device of claim 18, wherein the user device periodically verifies that the user process has not altered since being supplied to the computing environment.

25. The computing platform of claim 24, wherein the trusted device forms an integrity metric of the computing platform and an integrity metric of the computing environment.

26. The computing platform of claim 24, wherein the computing environment is a compartment.

27. The computing platform of claim 26, wherein the computing environment is an application level compartment.

28. The computing environment of claim 26, wherein the computing environment is an operating system compartment.

29. The computing platform of claim 26, wherein the computing environment has exclusive access to the compartment.

18. A user device for renting a computing environment on a computing platform, comprising:

a store for storing a user process; and

a processing unit for verifying integrity of the computing platform, confirming that a suitable computing environment is available for rent from the computing platform, verifying integrity of the computing environment, and for supplying a user process from the store for execution in the computing environment.

24. A computing platform for renting a computing environment, comprising:

a trusted device for verifying integrity of the computing platform and for verifying integrity of the computing environment; and

a computing unit for confirming suitability of the computing environment and for receiving a user process from a user device for execution in the computing environment.

30. A computer system comprising:

a user device for renting a computing environment on a computing platform, the user device having a store for storing a user process, and a processing unit for verifying integrity of the computing platform, confirming that a suitable computing environment is available for rent from the computing platform, verifying integrity of the computing environment, and for supplying a user process from the store for execution in the computing environment; and

a computing platform for renting a computing environment, the computing platform having a trusted device for verifying integrity of the computing platform and for verifying integrity of the computing environment, and a computing unit for confirming suitability of the computing environment and for receiving a user process from a user device for execution in the computing environment.