Trusted computing environment

• US 7,353,531 B2
• Filed: 02/22/2002
• Issued: 04/01/2008
• Est. Priority Date: 02/23/2001
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Dalton, Christopher I., Pearson, Siani Lynne, Brown, Richard
• Primary Examiner(s): TRUONG, THANHNGA B
• Application Number:
  US10/080,477
• Publication Number:
  US 20020119427A1
• Time in Patent Office: 2,230 Days
• Field of Search: 713/200, 713/201, 235/380, 434/1, 710/107, 380/52, 380/25, 709220-223, 709/224, 709/229, 726/1, 726/3, 705/50, 705/64
• US Class Current: 726/1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A trusted computing environment 100, wherein each computing device 112 to 118 holds a policy specifying the degree to which it can trust the other devices in the environment 100. The policies are updated by an assessor 110 which receives reports from trusted components 120 in the computing devices 112 to 118 which identify the trustworthiness of the computing devices 112 to 118.

Claims

1. A method of operating a trusted computing system comprising a plurality of computing devices on a network, the method comprising:

an assessor computing device receiving via the network a report from, and pertaining to the trustworthiness of, a first computing device; and

the assessor computing device updating via the network the trust policy of a second computing device in accordance with the report.

2. A method according to claim 1, wherein the assessor computing device updates via the network the trust policies of multiple computing devices in accordance with the report.

3. A method according to claim 1, wherein the assessor computing device updates via the network policies by assessing the trustworthiness of the first computing device on the basis of information about the first computing device in the report.

4. A method according to claim 1, wherein the assessor computing device updates via the network policies on the basis of an assessment of the trustworthiness of the first computing device contained in the report.

5. A method according to claim 1, wherein the assessor computing device requests via the network the first computing device to make the report.

6. A method according to claim 1, wherein the first computing device is caused to report by being started-up or reset, or by an undesirable event occurring.

7. A method according to claim 1, wherein the first computing device is caused to report periodically.

8. A method according to claim 1 in which the second computing device authenticates the trust policy update issued by the assessor computing device before accepting it.

9. A method of operating a trusted computing system comprising a plurality of computing devices on a network, in which a first computing device has a trusted component which issues a report pertaining to the trustworthiness of the first computing device wherein a trust policy controller receives said report via the network from the trusted component and updates via the network the trust policy of a second computing device in accordance with said report.

10. A method of operating a trusted computing system comprising multiple computing devices on a network, the method comprising:

a trust policy controller receiving reports via the network pertaining to the trustworthiness of each said computing device; and

the trust policy controller determining the trust policy for each of said computing devices in accordance with the trustworthiness of other of said multiple computing devices as determined from said received reports.

11. An assessor computing device for controlling a trusted computing system comprising multiple computing devices on a network, the assessor comprising a receiver for receiving via the network a report from, and pertaining to the trustworthiness of, a first computing device, an updater for updating the trust policy of a second computing device in accordance with the report, and a transmitter for transmitting the updated policy to the second computing device via the network.

12. An assessor computing device according to claim 11, wherein the updater is arranged to update the trust policies of multiple computing devices in accordance with the report and the transmitter is arranged to transmit the updated policies to the multiple computing devices via the network.

13. An assessor computing device according to claim 11, wherein the updater updates policies by assessing the trustworthiness of the first computing device on the basis of information about the first computing device in the report.

14. An assessor computing device according to claim 11, wherein the updater updates policies on the basis of an assessment of the trustworthiness of the first computing device contained in the report.

15. An assessor computing device according to claim 11 further comprising a requestor, for requesting the report from the first computing device.

16. A system, comprising:

an assessor computing device for controlling a trusted computing system comprising multiple computing devices on a network, the assessor comprising

a receiver for receiving via the network a report from, and pertaining to the trustworthiness of, a first computing device,

an updater for updating the trust policy of a second computing device in accordance with the report, and

a transmitter for transmitting the updated policy to the second computing device, and

the system further comprising first and second computing devices, wherein at least the first computing device comprises a reporter for sending via the network a trustworthiness report to the assessor computing device and at least the second computing device comprises a memory maintaining a trust policy such that the trust policy is modifiable by the transmitter.

17. A system as claimed in claim 16 in which the reporter comprises a trusted component associated with the first computing device.

18. A system, comprising:

multiple computing devices on a network, and

a trust policy controller which serves to determine the trust policy of said computing devices;

each of said computing devices having associated with it a trust policy memory to store a trust policy for that computing device, and a trusted component which issues a report pertaining to the trustworthiness of that computing device;

wherein

the controller receives via the network reports from the trust components and updates via the network the trust policy in the trust policy memory of each computing device in accordance with the trustworthiness of other of said multiple computing devices as determined from said reports.