Manifest-based trusted agent management in a trusted operating system environment

• US 20050289351A1
• Filed: 08/18/2005
• Published: 12/29/2005
• Est. Priority Date: 11/16/2001
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Simon, Daniel R., England, Paul, Peinado, Marcus, Benaloh, Josh D.
• Granted Patent: US 7,305,553 B2
• Time in Patent Office: Days
• US Class Current: 713/180
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

Manifest-based trusted agent management in a trusted operating system environment includes receiving a request to execute a process is received and setting up a virtual memory space for the process. Additionally, a manifest corresponding to the process is accessed, and which of a plurality of binaries can be executed in the virtual memory space is limited based on indicators, of the binaries, that are included in the manifest.

Claims

1. One or more computer readable media having stored thereon a plurality of instructions to implement a trusted core of a computing device that, when executed by one or more processors of the computing device, causes the one or more processors to:

receive, from a trusted application, a request to generate a digitally signed statement; and

generate a digitally signed statement including an identifier of a manifest corresponding to the trusted application.

2. One or more computer readable media as recited in claim 1, wherein the plurality of conditions include a public key of a public-private key pair of a party that digitally signed the manifest.

3. One or more computer readable media as recited in claim 1, wherein the plurality of conditions include an identifier of a party that generated the manifest.

4. One or more computer readable media as recited in claim 1, wherein the plurality of conditions include one or more manifest version indicators.