Trusted platform evaluation

• US 20030023872A1
• Filed: 07/11/2002
• Published: 01/30/2003
• Est. Priority Date: 07/30/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Stoker, Michael Brian, Chen, Liqun, Plaquin, David
• Application Number:
  US10/194,831
• Publication Number:
  US 20030023872A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A trusted environment agent helps a user with integrity checking of a trusted computing platform. The trusted environment agent performs the checking of a target platform by interrogation of a trusted device on the target platform.

Claims

1. A trusted environment agent for a trusted computing platform (TCP) comprises integrity challenge means and output means, wherein the integrity challenge means are operable to perform an integrity challenge on at least one target computing platform and the output means are operable to inform a user of results of the integrity challenge.

2. A trusted environment agent as claimed in claim 1, in which the target platform is a remote computing platform.

3. A trusted environment agent as claimed in claim 1, in which the target platform is a local platform, for example, the user'"'"'s platform.

4. A trusted environment agent as claimed in claim 1, which includes input means operable to receive information from a user concerning the type of integrity challenge to make to the target platform.

5. A trusted environment agent as claimed in claim 4, in which the input means are operable to receive from the user information concerning further communication or ending communication with the target platform.

6. A trusted environment agent as claimed in claim 4, in which the input means allows input from a user in the form of a policy to allow the user'"'"'s preferences to be determined by the trusted environment agent.

7. A trusted environment as claimed in claim 1, which is operable to be an advisory intermediary between the user and the target platform.

8. A trusted environment agent as claimed in claim 1, which is a hardware device.

9. A trusted environment agent as claimed in claim 1, which is a software implemented agent.

10. A trusted environment agent as claimed in claim 1, which is adapted to be installed in a user'"'"'s TCP.

11. A trusted environment agent as claimed in claim 1, which is adapted to be installed in a server remote from the user'"'"'s TCP and remote from the target computing platform.

12. A computer server includes a trusted environment agent as claimed in claim 1.

13. A method of evaluating a trusted computing platform (TCP) characterised by:

a user of a TCP contacting at least one target platform with a trusted environment agent;

said trusted environment agent then performing at least one integrity challenge on said at least one target platform with integrity challenge means, based on instructions provided by the user;

the trusted environment agent then returning the results of the integrity check for use by the user.

14. A method as claimed in claim 13, which includes the trusted environment agent making a plurality of integrity checks.

15. A method as claimed in either claim 13 or claim 14, which includes the trusted environment agent first checking the user'"'"'s local platform and then checking a remote platform.

16. A method as claimed in any one of claims 13 to 15, which includes the trusted environment agent obtaining a plurality of integrity metrics to provide them to the user.

17. A method as claimed in any one of claims 13 to 16 which includes the trusted environment agent performing integrity challenges on the target platform based on information provided by the user, wherein said information includes the user'"'"'s required usage of the target platform.

18. A method as claimed in any one of claims 13 to 17, which includes the trusted environment agent performing integrity challenges on the target platform and then, based on the results, informing the user whether or not he should proceed to communicate further with the target platform.

19. A recordable medium bearing a computer programme operable to perform the method of any one of claims 13 to 18.

20. A trusted environment agent for a trusted computing platform comprises an integrity challenge device and a display device, wherein the integrity challenge device is operable to perform an integrity challenge on at least one target computing platform and the display device is operable to display a result of the integrity challenge to a user.

21. A trusted environment agent as claimed in claim 20, in which the display device is a visual display.

22. A trusted environment agent as claimed in claim 20, in which the integrity challenge device incorporates a computer program for performing the integrity challenge.

23. A method of evaluating a trusted computing platform (TCP) comprises:

a user of TCP contacting at least one target platform with a trusted environment agent;

said trusted environment agent then performing at least one integrity challenge on said at least one target platform with an integrity challenge device, based on instructions provided by the user;

the trusted environment agent then returning the results of the integrity check for use by the user.