Patent ID: 9361462
Filing Date: 2016-06-07
CPC Classification: G06F

Claim Text:
1. A method of operatively associating a signing key with a software component of a computing platform, the computing platform including a trusted device and being arranged on start-up to first load a predetermined set of software components with each software component being measured prior to loading and a corresponding integrity metric recorded in registers of the trusted device the method comprising: generating a signing key and certificate evidence, comprising at least one certificate signed by a certificate authority, indicative that the signing key is operatively associated with a software component of said set: storing a key-related item in secure persistent storage, the key-related item being one of said signing key and authorisation data for its use; and using the trusted device to enable a software component of said set, herein the “key-associated component” to obtain the key-related item this enabling only occurring during a particular period of at platform start-up when register values recorded in the registers of the trusted device correspond to values present after recording of the integrity metric of the key-associated component in the registers and before another integrity metric is recorded in the registers, wherein the key-associated component is o securely store integrity measures of software components loaded after said set of software components, the key-associated component providing reports of these integrity measures with these reports being signed using the signing key.