Method of and apparatus for ascertaining the status of a data processing environment

• US 8,219,496 B2
• Filed: 02/22/2002
• Issued: 07/10/2012
• Est. Priority Date: 02/23/2001
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Pearson, Siani Lynne, Proudler, Graeme John
• Primary Examiner(s): Augustin, Evens J
• Application Number:
  US10/080,479
• Publication Number:
  US 20020120575A1
• Time in Patent Office: 3,791 Days
• Field of Search: 705/26, 713/153, 713/172, 713/168
• US Class Current: 705/67
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 20/3674 involving authentication

Abstract

In order to facilitate a user'"'"'s ability to trust a computing environment, a trusted computing device (2) is arranged to challenge other devices in the computing environment and to record a log of the facilities available within the computing environment and an indication of whether those facilities are trustworthy. A new user (40) entering the computing environment can obtain the log from the trusted computing device in order to ascertain the status of the environment. Alternatively any device can hold data concerning platforms in its vicinity and its operation can be authenticated by the trusted device.

Claims

1. a. A computing device including:

a communication device and a data processor, wherein the computing device uses the communication device to establish communication with at least one device within a data processing system, and in which the data processor is arranged to identify a challenge from at least one trusted computing device to search for a generation identifier within the challenge, to apply response rules to the generation identifier to see if the challenge is still valid, and if it is not to disregard the challenge and if the challenge is valid to apply response rules to the challenge and, if a response indicated, to respond to the challenge in accordance with the rules.

2. A computing device as claimed in claim 1, in which the computing device retransmits the challenge with a modified generation identifier if the challenge is valid.

3. A method of ascertaining the status of a data processing environment, comprising the following steps:

a trusted computing device challenges other devices within a data processing environment, keeps a record of responses made to the challenges and makes the record available, in which a challenge of the challenges generated by the trusted device includes a generation identifier such that any device receiving the challenge can examine the generation identifier in order to establish whether the challenge is directly received from the trusted computing device or whether it has been retransmitted.

4. A method as claimed in claim 3, in which the trusted computing continues to challenge the devices in the data processing environment so as to maintain an evolving record of the status of the data processing environment.

5. A method as claimed in claim 3, in which the record includes a historical status of the data processing environment.

6. A method as claimed in claim 3, in which the at least one trusted computing device listens to communications within the data processing environment so as to identify the presence of new devices.

7. a. A method of conducting a transaction in a data processing environment comprising a user device and al least a trusted computing device each having respective communication capabilities comprising:

the trusted computing device keeps a record of computing devices that it has identified within the data processing environment;

b. and whereby the user device establishes communication with the trusted computing device;

c. the trusted computing devices sends to the user device at least a portion of the record of computing devices within the data processing environment;

d. and the user device analyses the record to establish what facilities the user device may access;

e. wherein the user device further analyses the record in accordance with a set of security rules to determine what level of trust can be placed on the integrity of the data processing environment.