Patent ID: 8090919
Filing Date: 2012-01-03
Classification: G06F,H04L

Abstract:
1. A startup method for a virtual platform comprising: after power on of the platform, measuring a BIOS (Basic Input/Output System) and a Virtual Machine Monitor (VMM), wherein after being measured, the VMM to: establish a plurality of Virtual Machines (VMs), each of the plurality of VMs identified by a Virtual Machine Identification (VMID); load measured extension security services; load a separate guest operating system (OS) in each of the plurality of VMs; program Trusted Platform Module (TPM) access control hardware to partition TPM registers into a plurality of subsets of the TPM registers, each subset of the TPM registers: (i) being assigned to a separate VM using the VMID of the corresponding VM for dedicated access thereto and (ii) having a location identified by a separate Execution Instruction Pointer (EIP) field; and transfer control to the guest operating systems, wherein each guest operating system, after discovery of a TPM, loads a TPM device driver (TDD) program, wherein a TPM device driver (TDD) is registered with an integrity services device, wherein if the TDD passes an integrity check, a protected page table (PPT) is created for the TDD, TDD data and code is moved into the PPT, and a specific subset of the plurality of the TPM registers is accessible to the integrity checked TDD using the EIP and the VMID of the VM in which the guest operating system is loaded.