SYSTEM AND METHOD OF PROVIDING TRUSTED, SECURE, AND VERIFIABLE OPERATING ENVIRONMENT

• US 20120060030A1
• Filed: 09/07/2010
• Published: 03/08/2012
• Est. Priority Date: 09/07/2010
• Status: Active Grant

• Current Assignee: Nicholas L. Lamb
• Original Assignee: Nicholas L. Lamb
• Inventors: Lamb, Nicholas L.
• Granted Patent: US 8,782,404 B2
• Time in Patent Office: Days
• US Class Current: 713/166
• CPC Class Codes: F24C 7/083 on tops, hot plates
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A method and system of synergizing hardware, firmware, software, and useful feature(s) into a trusted, secure, and verifiable operating environment (TSVOE) that is critical for businesses and consumers that rely on information technology products and/or services. Such products provide various capabilities such as protecting the corporate infrastructure from attack, protecting the client from attack, designing a customizable operating schema, advanced validation of client authentication, establishing a clean environment within a dirty environment, etcetera. Moreover, by ensuring that operating environment security is achieved, a product can provide guarantees that modern state-of-the-art systems cannot. Finally, diversification of hardware, software, firmware, and features creates robust products.

Claims

1. A method of providing an operating environment, comprising:

storing and retrieving security tokens and/or security identifiers;

determining signaling, communicating with, and/or controlling said hardware;

interacting with base computing hardware being utilized by said device; and

determining whether to provide a trusted, secure, and/or verifiable operating environment by combining said hardware, said software and/or firmware, and said feature(s).

2. A method, comprising:

determining a level of security for an environment relative to a processing of a request; and

processing the request in the environment provided based on the level determined.

3. The method according to claim 2, comprising:

verifying the environment based on at least one factor.

4. The method according to claim 3, wherein the level requires a first combination of one or more security factors for said verifying.

5. The method according to claim 4, wherein the level requires a second combination of security factors for said verifying.

6. The method according to claim 2, wherein the level is selectively adjusted based on a need of a service provider.

7. The method according to claim 2, wherein the level is provided across all environments to which a user has access.

8. The method according to claim 2, wherein a client device is selectively set to operate based on one of a local operating environment, a client, a server, an infrastructure device, or a member of a cluster.

9. The method according to claim 2, wherein a predetermined type of instruction is ignored when received from a client device.

10. The method according to claim 2, where predetermined information is removed from a client device.

11. The method according to claim 2, wherein an enhanced multi-factor authentication is implemented to enable said processing of the request.

12. The method according to claim 3, wherein said verifying controls an operating environment, and determines whether to accept a request to operate an application.

13. The method according to claim 2, comprising:

configuring a client in accordance with a trusted fabrication that undergoes predetermined manufacturing and handling procedures.

14. The method according to claim 3, wherein a service provider establishes pre-existing rules for said verifying.

15. The method according to claim 3, wherein said verifying including obtaining information of multiple factors from at least two different sources.

16. The method according to claim 15, wherein said verifying determines whether the information obtained matches a selected combination of the multiple factors.

17. A device-readable storage medium having stored therein a program for causing a computer to execute an operation, comprising:

determining a level of security for an environment relative to a processing of a request; and

verifying the request for said processing in the environment provided based on the level determined.

18. A system, comprising:

a device processing a request; and

a processor determining a level of security for an environment relative to the processing of the request and validating the request for said processing in an environment provided based on the level determined.

19. The system according to claim 18, wherein the device is configured in accordance with a trusted fabrication that undergoes predetermined manufacturing and handling procedures.

20. The system according to claim 18, wherein the device is designated as untrusted.