System and method for remote security enablement

• US 20060053277A1
• Filed: 09/08/2004
• Published: 03/09/2006
• Est. Priority Date: 09/08/2004
• Status: Active Grant

• Current Assignee: Workday Incorporated
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Wang, Lan, Ali, Valiuddin, Rios, Jennifer
• Granted Patent: US 7,568,225 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 9/4403 Processor initialisation

Abstract

A system for remote security enablement comprises a trusted platform module (TPM) disposed on a user client and an administration client adapted to access, via a communication network, the user client to cause enablement of the TPM on a subsequent boot of the user client.

Claims

1. A system for remote security enablement, comprising:

a trusted platform module (TPM) disposed on a user client; and

an administration client adapted to access, via a communication network, the user client to cause enablement of the TPM on a subsequent boot of the user client.

2. The system of claim 1, wherein the administration client is adapted to cause the user client to notify a user of the user client that the TPM is being enabled.

3. The system of claim 1, wherein the administration client is adapted to cause the user client to display a prompt to a user of the user client requesting acceptance of the TPM enablement.

4. The system of claim 1, wherein the user client is adapted to receive an acceptance input from a user of the user client indicating acceptance of the TPM enablement.

5. The system of claim 1, wherein the user client is adapted to receive a rejection input from a user of the user client indicating rejection of the TPM enablement.

6. The system of claim 1, wherein the administration client is adapted to cause the user client to display a prompt to a user of the user client enabling the user to reject the TPM enablement.

7. The system of claim 1, wherein the administration client is adapted to instruct a basic input/output system (BIOS) of the user client to enable the TPM on the subsequent boot of the user client.

8. The system of claim 1, wherein the administration client is adapted to cause the user client to display a prompt to a user of the user client during the subsequent boot notifying the user of the TPM enablement.

9. The system of claim 1, wherein the user client is adapted to indicate to the administration client an ownership state of the TPM.

10. The system of claim 1, wherein the user client is adapted to enable ownership of the TPM by the administration client.

11. A system for remote security enablement, comprising:

means for enabling access to a user client by an administration client via a communication network; and

means for enabling the administration client to cause enablement of a trusted platform module (TPM) of the user client on a subsequent boot of the user client.

12. The system of claim 11, further comprising means for displaying a prompt on the user client requesting a user of the user client to accept the TPM enablement.

13. The system of claim 11, further comprising means for receiving a rejection input by a user of the user client indicating user rejection the TPM enablement.

14. The system of claim 11, further comprising means for receiving an acceptance input from a user of the user client indicating user acceptance of the TPM enablement.

15. The system of claim 11, further comprising means for notifying a user of the user client that the TPM will be enabled on the subsequent boot of the user client.

16. A remote security enablement method, comprising:

establishing a communication session between a user client and an administration client via a communication network; and

enabling the administration client to cause enablement of a trusted platform module (TPM) of the user client on a subsequent boot of the user client.

17. The method of claim 16, further comprising displaying a prompt on the user client requesting a user of the user client to accept the TPM enablement.

18. The method of claim 16, further comprising receiving a rejection input by a user of the user client indicating user rejection the TPM enablement.

19. The method of claim 16, further comprising receiving an acceptance input from a user of the user client indicating user acceptance of the TPM enablement.

20. The method of claim 16, further comprising notifying a user of the user client that the TPM will be enabled on the subsequent boot of the user client.

21. The method of claim 16, further comprising determining an ownership state of the TPM.

22. The method of claim 16, further comprising enabling ownership of the TPM by the administration client.

23. The method of claim 16, further comprising displaying a prompt on the user client notifying a user of the user client of TPM enablement and requesting the user to provide an input response to continue processing on the user client.

24. A system for remote security enablement, comprising:

a remote TPM enablement module disposed on a user client, the remote TPM enablement module adapted to cause enablement of a trusted platform module (TPM) of the user client on a subsequent boot of the user client in response to a TPM enablement request received from an administration client via a communication network.

25. The system of claim 24, the TPM enablement module adapted to display a prompt on the user client notifying a user of the user client of the TPM enablement.

26. The system of claim 24, the TPM enablement module adapted to display a prompt on the user client requesting a user of the user client to indicate acceptance of the TPM enablement.

27. The system of claim 24, the TPM enablement module adapted to receive an input response from a user of the user client indicating acceptance of the TPM enablement.

28. The system of claim 24, the TPM enablement module adapted to receive an input response from a user of the user client indicating rejection of the TPM enablement.

29. The system of claim 24, the user client adapted to indicate an ownership state of the TPM to the administration client.

30. The system of claim 24, the user client adapted to enable ownership of the TPM by the administration client.

31. The system of claim 24, the remote TPM enablement module adapted to initiate the subsequent boot of the user client in response to the enablement request.