Patent ID: 9606940
Date: 2017-03-28
CPC Classifications: G06F

Claim:
1. At least one non-transitory machine readable medium on which is stored code that, when executed enables a system to: initialize a first trusted loader (TL) within a trusted region of a memory of the system and initialize a measurement and storage manager (MSM) within the trusted region of the memory of the system; associate a first TL marker with the first TL to form a marked first TL, wherein the first TL marker is based on a first TL identifier associated with the first TL to bind the first TL to the MSM; receive by the MSM a first TL measurement of the marked first TL from a trusted processor of the system, the trusted processor to determine the first TL measurement based on contents of the marked first TL; determine whether to establish a secure channel between the MSM and the first TL based at least in part on the first TL measurement; responsive to a determination to establish the secure channel, establish the secure channel and store first code in the first TL after the first TL measurement, including to transfer cryptographic key material from the MSM to the first TL, the first code comprising an applet having arbitrary code; conduct by the marked first TL a measurement of the first code and provide the measurement of the first code from the marked first TL to the MSM responsive to the secure channel being established; and responsive to a request, provide the measurement of the first code from the MSM to a requester.