Patent ID: 9692599
Date: 2017-06-27
CPC Classifications: G06F,H04L

Claim:
1. A computer implemented method comprising: receiving a generalized endorsement key at a security module on a computing device, wherein the security module is a hardware component of the computing device, and wherein the generalized endorsement key is independent of characteristics of the computing device; automatically extending integrity measurements stored in one or more registers of the security module with information characterizing the computing device, wherein the integrity measurements are based on one or more software processes at the computing device; generating, by the security module, a digital signature; digitally signing the extended integrity measurements with the generated digital signature; generating, by the security module, a specialized endorsement credential based on a combination of the digitally signed extended integrity measurements, the generated digital signature used to sign the extended integrity measurements, and the generalized endorsement key, wherein the specialized endorsement credential is used to validate authenticity of the security module; providing, by the security module, in a request for an attestation identity credential, the specialized endorsement credential to a certificate authority; and receiving, by the security module, from the certificate authority, the attestation identity credential, the attestation identity credential indicating that the specialized endorsement credential is bound to an authentic security module.