Manifest-based trusted agent management in a trusted operating system environment

• US 20060005230A1
• Filed: 08/18/2005
• Published: 01/05/2006
• Est. Priority Date: 11/16/2001
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Simon, Daniel R., England, Paul, Peinado, Marcus, Benaloh, Josh D.
• Granted Patent: US 7,634,661 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

Manifest-based trusted agent management in a trusted operating system environment includes receiving a request to execute a process is received and setting up a virtual memory space for the process. Additionally, a manifest corresponding to the process is accessed, and which of a plurality of binaries can be executed in the virtual memory space is limited based on indicators, of the binaries, that are included in the manifest.

Claims

1. A computer readable medium having stored thereon a data structure that allows a secret associated with a trusted application to be exported to another trusted application, the data structure comprising:

a first portion including an identifier of a manifest associated with the application;

a second portion including an identifier of a manifest associated with the other application; and

a third portion derived from the identifiers in both the first portion and the second portion by generating a digital signature over the first and second portions.

2. A computer readable medium as recited in claim 1, wherein the data structure further comprises:

a fourth portion including an identification of a particular computing device on which the data structure can be used to export the secret.

3. A computer readable medium as recited in claim 1, wherein the second portion includes identifiers of a plurality of manifests associated with a plurality of additional applications to which the secret can be exported.

4. A computer readable medium as recited in claim 3, wherein each of the plurality of additional applications is a newer version of the other application.