Patent ID: 9489232
Filing Date: 2016-11-08
CPC Classification: G06F

Claim Text:
1. An apparatus configured to attest a plurality of data processing systems included in a datacenter, comprising: logic configured to generate respective logical groupings for each of the data processing systems, wherein the logical groupings are associated with a rule that describes a condition that must be met in order for the data processing systems to be considered trusted, and wherein the datacenter includes a plurality of machine pools each of which includes two or more of the data processing systems, where each of the plurality of data processing systems includes a plurality of virtual machines each of which has an associated platform configuration register (PCR) that stores a measurement value; logic configured to retrieve a list of one or more children associated with each of the logical groupings; logic configured to attest the one or more children in order to determine whether each of the one or more children is trusted, wherein the attesting includes comparing the measurement value to an expected attestation value; logic configure to, subsequent to the attesting, apply the rule to determine whether the condition has been met in order for the data processing systems to be considered trusted, wherein based on the rule a first one of the logical groupings is deemed trusted when all of the children of the first one of the logical groupings have a same untrusted state or a same trusted state, and wherein a child is associated with a PCR or a further logical grouping and when the child is associated with the further logical grouping the retrieving is repeated until another child associated with the PCR is found, where the apparatus is a data processing system.