System and method for user determination of secure software

• US 7,464,406 B2
• Filed: 04/22/2004
• Issued: 12/09/2008
• Est. Priority Date: 04/22/2004
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Cromer, Daryl Carvis, Locker, Howard Jeffrey, Springfield, Randall Scott
• Primary Examiner(s): Vu; KimYen
• Assistant Examiner(s): Pich; Ponnoreay
• Application Number:
  US10/830,378
• Publication Number:
  US 20050240998A1
• Time in Patent Office: 1,692 Days
• Field of Search: None
• US Class Current: 726/21
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A secure computer system includes a central processing unit in which plural programs reside. The system includes means for verifying whether the at least one program is trusted or not trusted. That means can be an external key device that includes a verification program that can communicate with the programs residing within the central processing unit.

Claims

1. A secure computer system, comprising:

a central processing unit (CPU);

at least one program residing within the central processing unit; and

a portable device configured for communicating with the program to verify whether the program is trusted, the portable device first determining whether the program is operating in a trusted portion of the CPU, and if not, indicating not verified, otherwise determining whether the program is operating in a trusted mode, and if not, indicating not verified, otherwise indicating verified.

2. The system of claim 1, wherein the device is wireless and includes means for indicating whether the at least one program is trusted or not trusted.

3. The system of claim 1, wherein the device is wireless and includes a verification program for communicating with the program.

4. The system of claim 3, wherein the verification program generates a random identifier and sends the random identifier to the program within the CPU.

5. The system of claim 4, wherein the verification program encrypts the random identifier prior to sending it.

6. The system of claim 5, wherein the verification program further comprises logic for:

when the at least one program is trusted, receiving the random identifier from the at least one program.