Trusted computing environment

• US 20020119427A1
• Filed: 02/22/2002
• Published: 08/29/2002
• Est. Priority Date: 02/23/2001
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Dalton, Christopher I., Pearson, Siani Lynne, Brown, Richard
• Granted Patent: US 7,353,531 B2
• Time in Patent Office: Days
• US Class Current: 434/1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A trusted computing environment 100, wherein each computing device 112 to 118 holds a policy specifying the degree to which it can trust the other devices in the environment 100. The policies are updated by an assessor 110 which receives reports from trusted components 120 in the computing devices 112 to 118 which identify the trustworthiness of the computing devices 112 to 118.

Claims

1. A method of operating a trusted computing system, the method comprising an assessor receiving a report from, and pertaining to the trustworthiness of, a first computing device, and the assessor updating the trust policy of a second computing device in accordance with the report.

2. A method according to claim 1, wherein the assessor updates the trust policies of multiple computing devices in accordance with the report.

3. A method according to claim 1, wherein the assessor updates policies by assessing the trustworthiness of the first computing device on the basis of information about the first computing device in the report.

4. A method according to claim 1, wherein the assessor updates policies on the basis of an assessment of the trustworthiness of the first computing device contained in the report.

5. A method according to claim 1, wherein the assessor requests the first computing device to make the report.

6. A method according to claim 1, wherein the first computing device is caused to report by being started-up or reset, or by an undesirable event occurring.

7. A method according to claim 1, wherein the first computing device is caused to report periodically.

8. A method according to claim 1 in which the second computing device authenticates the trust policy update issued by the assessor before accepting it.

9. A method of operating a trusted computing system in which a first computing device has a trusted component which issues a report pertaining to the trustworthiness of the first computing device wherein a trust policy controller receives said report from the trusted component and updates the trust policy of a second computing device in accordance with said report.

10. A method of operating a trusted computing system comprising multiple computing devices wherein a trust policy controller determines the trust policy for each of said computing devices in accordance with the trustworthiness of other of said multiple computing devices as determined from reports received by the controller pertaining to the trustworthiness of each computing device.

11. An assessor for controlling a trusted computing system, the assessor comprising a receiver for receiving a report from, and pertaining to the trustworthiness of, a first computing device, an updater for updating the trust policy of a second computing device in accordance with the report, and a transmitter for transmitting the updated policy to the second computing device.

12. An assessor according to claim 11, wherein the updater is arranged to update the trust policies of multiple computing devices in accordance with the report and the transmitter is arranged to transmit the updated policies to the multiple computing devices.

13. An assessor according to claim 11, wherein the updater updates policies by assessing the trustworthiness of the first computing device on the basis of information about the first computing device in the report.

14. An assessor according to claim 11, wherein the updater updates policies on the basis of an assessment of the trustworthiness of the first computing device contained in the report.

15. An assessor according to claim 11 further comprising a requestor, for requesting the report from the first computing device.

17. A system as claimed in claim 16 in which the reporter comprises a trusted component associated with the first computing device.

16. A system comprising an assessor for controlling a trusted computing system, the assessor comprising a receiver for receiving a report from, and pertaining to the trustworthiness of, a first computing device, an updater for updating the trust policy of a second computing device in accordance with the report, and a transmitter for transmitting the updated policy to the second computing device, and the system further comprising first and second computing devices, wherein at least the first computing device comprises a reporter for sending a trustworthiness report to the assessor and at least the second computing device comprises a memory maintaining a trust policy such that the trust policy is modifiable by the transmitter.

18. A system comprising multiple computing devices and a trust policy controller which serves to determine the trust policy of said computing devices;

each of said computing devices having associated with it a trust policy memory to store a trust policy for that computing device, and a trusted component which issues a report pertaining to the trustworthiness of that computing device;

wherein the controller receives reports from the trust components and updates the trust policy in the trust policy memory of each computing device in accordance with the trustworthiness of other of said multiple computing devices as determined from said reports.