Apparatus for remote working

• US 20040010686A1
• Filed: 04/18/2003
• Published: 01/15/2004
• Est. Priority Date: 04/18/2002
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Goh, Cheh, Mont, Marco Casassa
• Application Number:
  US10/418,301
• Publication Number:
  US 20040010686A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A computer system comprises a computer apparatus that requests a first computer arrangement to provide data to a second computer arrangement in response to the computer apparatus determining that the second computer arrangement has a trusted device.

Claims

1. Computer system comprising a computer apparatus, a first computer arrangement and second computer arrangement, the computer apparatus arranged to provide to the first computer arrangement a request to provide data to the second computer arrangement in response to a determination by the computer apparatus indicating the second computer arrangement incorporates a trusted device and prevent the data from being provided to the second computer in response to the determination indicating the second computer does not incorporate the trusted device.

2. Computer system according to claim 1, wherein the second computer arrangement includes the trusted device, the trusted device including cryptographic functionality to allow secure transmission of data from the first computer arrangement to the second computer arrangement.

3. Computer system according to claim 1, wherein the second computer arrangement includes the trusted device, the trusted device including a private key and associated public key.

4. Computer system according to claim 1, wherein the computer apparatus is arranged to provide an address associated with the second computer arrangement to the first computer arrangement.

5. Computer system according to claim 4, wherein the address is for the trusted device.

6. Computer system according to claim 1, wherein the second computer arrangement includes the trusted device, the trusted device being arranged to provide an address for the trusted device to the computer apparatus.

7. Computer system according to claim 1, wherein the first computer system is arranged to encrypt the data with a public key associated with the trusted device.

8. Computer system according to claim 7, wherein the computer apparatus is arranged to provide the public key associated with the trusted device to the first computer arrangement.

9. Computer system according to claim 1, wherein the trusted device is tamper resistant.

10. Computer system according to claim 1, wherein the second computer arrangement has an output device for outputting information derived from the data.

11. Computer system according to claim 10, wherein the output device includes a display.

12. Computer system according to claim 1, wherein the second computer arrangement has a processor for processing the data.

13. Computer system according to claim 12, wherein the processor forms part of the trusted device.

14. Computer system comprising a computer apparatus, a first computer arrangement and a second computer arrangement, the computer apparatus being arranged to provide to a first computer arrangement a request to provide data to a second computer arrangement in response to a determination by the computer apparatus that the second computer arrangement includes a trusted device having cryptographic functionality to allow secure transmission of the data from the first computer arrangement to the second computer arrangement and prevent the data from being provided to the second computer arrangement in response to the determination indicating the second computer arrangement does not incorporate the trusted device.

15. Computer apparatus comprising a processor arranged to generate a request for a first computer arrangement to provide data to a second computer arrangement in response to a determination by the processor that the second computer arrangement incorporates a trusted device.

16. Computer apparatus according to claim 15, further comprising a transmitter for providing the request to the first computer arrangement.

17. Computer apparatus according to claim 16, wherein the transmitter is arranged to provide an address associated with the second computer arrangement to the first computer arrangement.

18. Computer apparatus according to claim 17, wherein the address is for the trusted device of the second computer arrangement.

19. Computer apparatus according to claims 16, wherein the transmitter is arranged to provide a public key associated with the trusted device to the first computer arrangement.

20. Computer system comprising a mobile apparatus arranged to provide to a first computer arrangement a request to provide data to a second computer arrangement and an address associated with the second computer arrangement in response to a determination by the mobile apparatus that the second computer arrangement incorporates a trusted device, the trusted device including cryptographic functionality to allow secure transmission of data from the first computer arrangement to the second computer arrangement, the mobile apparatus and the second computer arrangement being arranged to interact locally to perform said determination.

21. Computer system according to claim 20, wherein the mobile apparatus is arranged to provide the public key associated with the trusted device to the first computer arrangement.

22. Computer system according to any claim 20, wherein the second computer arrangement has an output device for outputting information derived from the data.

23. Computer system according to claim 22, wherein the output device includes a display.

24. Computer system as claimed in claim 20 further including a wireless link or dedicated cable for providing the local interaction.

25. A method of operating a computer system comprising determining, by using a computer apparatus, if a second computer arrangement incorporates a trusted device and, if so, requesting a first computer arrangement to provide data to the second computer arrangement, by using the computer apparatus.

26. A method as claimed in claim 25 comprising providing an address associated with the second computer arrangement to the first computer arrangement.

27. A method as claimed in claim 25 wherein the first computer arrangement encrypts the data with a public key associated with the trusted device.

28. A method as claimed in claim 25, wherein the computer apparatus provides the public key associated with the trusted device to the first computer arrangement.

29. A method as claimed in claim 25 wherein the computer apparatus is a mobile device.

30. A computer apparatus for use with first and second computer arrangements, the computer apparatus including a processor and a memory, the processor and memory being arranged to cause the first computer arrangement to provide data to the second computer arrangement in response to a determination by the processor indicating the second computer arrangement incorporates a trusted device and prevent the data from being provided to the second computer in response to the determination indicating the second computer does not incorporate the trusted device.

31. A storage device for a computer apparatus for use with first and second computer arrangements, the memory storing signals for causing the computer apparatus to provide to the first computer arrangement a request to provide data to the second computer arrangement in response to a determination by the computer apparatus indicating the second computer arrangement incorporates a trusted device and prevent the data from being provided to the second computer in response to the determination indicating the second computer does not incorporate the trusted device.

32. A computer apparatus for use with first and second computer arrangements, the computer apparatus including a processor and a memory, the processor and memory being arranged to cause the first computer arrangement to provide data to the second computer arrangement in response to a determination by the processor that the second computer arrangement includes a trusted device having cryptographic functionality to allow secure transmission of the data from the first computer arrangement to the second computer arrangement and prevent the data from being provided to the second computer in response to the determination indicating the second computer does not incorporate the trusted device.

33. A storage device for a computer apparatus for use with first and second computer arrangements, to provide data to the second computer arrangement in response to a determination by the processor that the second computer arrangement includes a trusted device having cryptographic functionality to allow secure transmission of the data from the first computer arrangement to the second computer arrangement and prevent the data from being provided to the second computer in response to the determination indicating the second computer does not incorporate the trusted device.