Information system

• US 8,218,765 B2
• Filed: 02/22/2002
• Issued: 07/10/2012
• Est. Priority Date: 02/23/2001
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Proudler, Graeme John, Balacheff, Boris
• Primary Examiner(s): TRUONG, THANHNGA B
• Application Number:
  US10/080,476
• Publication Number:
  US 20020120862A1
• Time in Patent Office: 3,791 Days
• Field of Search: 455/418, 455/456.1, 455/414.1, 455/404.1, 455/404.2, 455/440, 455457-458, 455/411, 455/420, 709/201, 709/217, 709/223, 709/218, 709202-203, 709/229, 713/201, 713/153, 713/150, 713/155, 705/74, 705/50, 705/712, 340/995, 340/988, 380/258, 380/278, 380/286, 380/30, 380/270, 726/3, 726/1, 726/20, 726/26, 726/2, 707/9, 707/5, 707/25, 707/E17.018, 370/316, 716/1, 342/457, 342/463, 342/464, 715/712
• US Class Current: 380/258
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

A trusted service which publishes information describing security attributes of computing platforms in a defined physical area, for use by a visitor to a building, for example, who is unfamiliar with the computing platforms available for use therein. In a preferred embodiment, the system provides only details and/or a list of public keys of genuine trusted computing platforms within the area.

In another embodiment of the invention, the information system comprises a trusted computing platform for providing selected information to a user'"'"'s portable computing apparatus.

Claims

1. An information system comprising an information access point relating to at least one pre-determined geographical area, said information access point including apparatus for retrieving information relating to trusted computing platforms located within said pre-determined geographical area, said information system being arranged to provide said information relating to the trusted computing platforms located within the pre-determined geographical area to a portable computing apparatus visiting the pre-determined geographical area, wherein providing said information to the portable computing apparatus enables the portable computing apparatus to interact with trusted components of said trusted computing platforms within the pre-determined geographical area.

2. A system according to claim 1, wherein said information system is arranged to provide to the portable computing apparatus as said information only details and/or a list of public keys of genuine trusted computing platforms within said pre-determined geographical area.

3. A system according to claim 1, wherein said information access point comprises a trusted computing platform.

4. A system according to claim 1, comprising apparatus for communicating or interacting with the portable computing apparatus.

5. A system according to claim 4, wherein said apparatus for communicating or interacting with the portable computing apparatus is arranged to perform said communication or interaction by physical contact or directional wireless communication.

6. A system according to claim 1, incorporating or accompanied by a declaration concerning the trustworthiness of the system.

7. A system according to claim 6, wherein said declaration is capable of interpretation by a user of the portable computing apparatus without preprocessing by an information processing system.

8. A system according to claim 1, arranged to verify the identity of a user.

9. A system according to claim 1, arranged to enable a user to perform operations, either locally or remotely, upon the information that the system provided to the portable computing system.

10. A system according to claim 1, wherein the information provided to the portable computing apparatus includes security attributes of the trusted computing platforms within said pre-determined geographical area.

11. A method comprising:

providing an information access point for a geographical area;

retrieving to the information access point information relating to trusted computing platforms within the geographical area; and

the information access point providing the information relating to the trusted computing platforms within the geographical area to a portable computing apparatus visiting the geographical area, wherein the information provided to the portable computing apparatus enables the portable computing apparatus to interact with trusted components of said trusted computing platforms.

12. The method of claim 11, wherein providing the information relating to the trusted computing platforms within the geographical area comprises providing to the portable computing apparatus only information relating to genuine trusted computing platforms within the geographical area.

13. The method of claim 12, wherein providing the information relating to the trusted computing platforms within the geographical area comprises providing to the portable computing apparatus a list of public keys of the genuine trusted computing platforms within the geographical area.

14. The method of claim 11, wherein providing the information relating to the trusted computing platforms within the geographical area to the portable computing apparatus comprises the information access point communicating with the portable computing apparatus when the portable computing apparatus is in physical contact with the information access point.

15. The method of claim 11, wherein providing the information relating to the trusted computing platforms within the geographical area to the portable computing apparatus comprises the information access point communicating with the portable computing apparatus when the portable computing apparatus is in position for directional wireless communication with the information access point.

16. The method of claim 11, further comprising the portable computing apparatus using said information from the information access point to interact with a trusted component of one of said trusted computing platforms within the geographical area.

17. The method of claim 11, further comprising:

the portable computing apparatus requesting that a verification service verify the information relating to the trusted computing platforms within the geographical area;

the verification service verifying identities of the trusted computing platforms, signing results, and returning signed results to the portable computing apparatus; and

the portable computing apparatus using the signed results to identify which of the trusted computing platforms can be trusted.

18. A system comprising:

one or more trusted computing platforms located within a geographical area; and

an information access point in the geographical area, the information access point including an apparatus for retrieving information needed for interaction with trusted components of the trusted computing platforms and an interface arranged to provide the information needed for interaction with trusted components of the trusted computing platforms to a portable computing apparatus visiting the geographical area.

19. The system of claim 18, wherein the interface comprises at least one of a contact reader and a directional wireless communication interface through which the portable computing apparatus can communicate with the information access point.

20. The system of claim 18, wherein the information needed for interaction with trusted components of the trusted computing platforms includes public keys associated with the trusted computing platforms within the geographical area.