Patent ID: 7526649
Filing Date: 2009-04-28
Classification: H04L

Abstract:
1. A method comprising: requesting a service for a platform from a service provider; receiving a service key request for the service from the service provider, wherein the service key is to be restricted to one or more acceptable configurations of the platform, the configuration of the platform being represented by a set of platform configuration registers, the service provider having a policy regarding which configurations are acceptable, the acceptable configurations being represented by allowable combinations of values of the platform configuration registers; generating a service key pair that is restricted to the platform configuration register values for the one or more acceptable configurations of the platform, the service key pair including a public key and a private key, and returning the public key of the key pair to the service provider; certifying the use of the service for the one or more acceptable configurations of the platform; and receiving a session key for a session of the service from the service provider, the session key being bound with the public key of the service key pair, wherein the private key of the service key pair may be utilized to unbind the session key only if the configuration of the platform matches the one or more acceptable configurations to which the service key is restricted.