Patent ID: 8584229
Filing Date: 2013-11-12
Classification: G06F

Abstract:
1. A processing system comprising: a storage medium; a processing unit in communication with the storage medium; a hardware trusted platform module (TPM) in communication with the processing unit; instructions in the storage medium, which, when executed by the processing unit, implement a virtual TPM (vTPM) manager operable to perform operations comprising: detecting a first request from a service virtual machine (VM) in the processing system, the first request directed to the hardware TPM (hTPM); in response to detecting the first request, automatically determining whether the first request should be allowed, based at least in part on filter rules for hTPM operations, wherein the filter rules for hTPM operations identify at least one allowed or disallowed operation pertaining to the hTPM; detecting a second request from the service VM, the second request directed to a software TPM (sTPM) in the processing system; in response to detecting the second request, automatically determining whether the second request should be allowed, based at least in part on filter rules for vTPM operations; wherein the sTPM manages both temporal state information and persistent state information for the service VM.