Patent ID: 7568114
Filing Date: 2009-07-28
Classification: G06Q,H04L

Abstract:
1. A computer program running on a trusted computing platform; a client public/private key pair; means to display a signed form from a server, interact securely with a user, and sign a modification of the form with said key pair; a client certificate, attesting that said processor will conform to policies implied by any document signed by said key pair; a memory value defined by said form; an external domain defined by said form, and associated to said memory value; means to agree on a session key with said server; means to decrypt and authenticate messages with said session key; a memory register, holding said memory value; means to store a cryptovariable in a secure tamper-resistant storage register; means to encrypt said memory register with said cryptovariable into a first encrypted data block; means to alter said memory register by decrypting said first encrypted data block with said cryptovariable; replacing said cryptovariable, and re-encrypting into a second encrypted data block; whereby rendering useless any copy of said first encrypted data block; and means for storing and updating said memory value in said memory register exclusively by a cryptographically secured command for said external domain.