Physical presence determination in a trusted platform

• US 20040205362A1
• Filed: 04/10/2003
• Published: 10/14/2004
• Est. Priority Date: 04/10/2003
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Springfield, Randall Scott, Goodman, Steven Dale, Ward, James Peter, Catherman, Ryan Charles, Hoff, James Patrick
• Granted Patent: US 7,269,747 B2
• Time in Patent Office: Days
• US Class Current: 713/300
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/575 Secure boot

Abstract

A computer system is presented which provides a trusted platform by which operations can be performed with an increased level trust and confidence. The basis of trust for the computer system is established by an encryption coprocessor and by code which interfaces with the encryption coprocessor and establishes root of trust metrics for the platform. The encryption coprocessor is built such that certain critical operations are allowed only if physical presence of an operator has been detected. Physical presence is determined by inference based upon the status of registers in the core chipset.

Claims

1. Apparatus comprising:

a trusted platform module (TPM);

a nonvolatile memory having computer readable program code stored therein; and

a circuit board which couples said TPM and said nonvolatile memory and which includes a processor which executes the code stored in said nonvolatile memory and further includes a status register which assumes a power-on status state which indicates how the application of power to said circuit board was last previously initiated;

wherein the processor, when executing the code stored in said nonvolatile memory, is effective to;

read the power-on status state of the status register;

determine whether the application of power to said circuit board was last previously initiated by the activation of a power-on switch coupled to said circuit board based on the power-on status state as read from the status register; and

issue a command which affects the operation of said TPM as a function of the determined power-on state.

2. Apparatus of claim 1 wherein the status register is settable only in hardware.

3. Apparatus of claim 1 wherein the code which is effective to read, determine, and issue is executed after a reset event and prior to the execution of code which is stored in other than said nonvolatile memory.

4. Apparatus of claim 1 wherein the code which is effective to read, determine, and issue is executed after a reset event and prior to the execution of code which loads the operating system.

5. Apparatus of claim 4 wherein the code which loads the operating system is a first instance of an INT 19h following the reset event.

6. Apparatus of claim 3 wherein the reset event is an event selected from the group consisting of a hardware initiated reset and a software initiated reset.

7. Apparatus of claim 3 wherein the code stored in said nonvolatile memory is further effective when executing to:

set a physical presence flag in said TPM.

8. Apparatus of claim 7 wherein the code stored in said nonvolatile memory is further effective when executing to:

set a physical presence lock flag in said TPM.

9. Apparatus of claim 1 wherein the code which is effective to read, determine, and issue is executed subsequent to a reset event and prior to any execution of code which accesses a computer system I/O device, wherein the computer system I/O device is a device selected from the group consisting of a keyboard device, a video device, and a pointing device.

10. Apparatus of claim 1 wherein the issued command limits the operation of said TPM in response to a determination that the power-on switch was not activated in the last previously initiated application of power based on the power-on status state as read from the status register.

11. Apparatus of claim 1 wherein the issued command allows a predetermined trusted operation to execute in said TPM in response to a determination that the power-on switch was activated in the last previously initiated application of power based on the power-on status state as read from the status register.

12. Apparatus comprising:

a trusted platform module (TPM);

a nonvolatile memory having computer readable program code stored therein; and

a circuit board which couples said TPM and said nonvolatile memory and having a processor and a status register which is settable only in hardware and assumes a power-on status state which indicates how the application of power to said circuit board was last previously initiated;

wherein the processor and said nonvolatile memory are configured on said circuit board so as to execute code stored therein as the initial code executed by the processor in response to a reset event, the code being effective when executing to;

read the power-on status state of the status register;

determine whether the application of power to said circuit board was last previously initiated by the activation of a power-on switch coupled to said circuit board based on the power-on status state as read from the status register; and

configure a physical presence flag in said TPM to indicate lack of physical presence in response to a determination that the power-on switch was not activated;

wherein the code which is effective to read, determine, and configure executes before an OS load event, and wherein operation of said TPM is limited as a function of the configured physical presence flag.

13. Apparatus of claim 12 wherein the code stored in said nonvolatile memory is further effective when executing to:

lock the physical presence flag in said TPM by setting a physical presence lock flag in said TPM;

wherein the code locks the physical presence flag before the OS load event.

14. Apparatus of claim 13 wherein the os load event is an event which loads the operating system and wherein the reset event is an event selected from the group consisting of a hardware initiated reset and a software initiated reset.

15. Apparatus of claim 14 wherein the event which loads the operating system is a first instance of an INT 19h following the reset event.

16. Apparatus comprising:

a trusted platform module (TPM);

a nonvolatile memory having computer readable program code stored therein; and

a circuit board which couples said TPM and said nonvolatile memory and having a processor and a status register which is settable only in hardware and assumes a power-on status state which indicates how the application of power to said circuit board was last previously initiated;

wherein the processor and said nonvolatile memory are configured on said circuit board so as to execute code stored therein as the initial code executed by the processor in response to a reset event, the code being effective when executing to;

read the power-on status state of the status register;

determine whether the application of power to said circuit board was last previously initiated by the activation of a power-on switch coupled to said circuit board based on the power-on status state as read from the status register; and

configure a physical presence flag in said TPM to indicate physical presence in response to a determination that the power-on switch was activated;

wherein the code which is effective to read, determine, and configure executes before an OS load event, and wherein a predetermined trusted operation is allowed to execute in said TPM as a function of the configured physical presence flag.

17. Apparatus of claim 16 wherein the code stored in said nonvolatile memory is further effective when executing to:

lock the physical presence flag in said TPM by setting a physical presence lock flag in said TPM;

wherein the code locks the physical presence flag before the OS load event.

18. Apparatus of claim 17 wherein the os load event is an event which loads the operating system and wherein the reset event is an event selected from the group consisting of a hardware initiated reset and a software initiated reset.

19. Apparatus of claim 18 wherein the event which loads the operating system is a first instance of an INT 19h following the reset event.