Patent ID: 8208637
Filing Date: 2012-06-26
Classification: G06F,H04L

Abstract:
1. A computer-readable medium storing computer-executable instructions which, when executed, cause a computing machine to perform steps comprising: receiving, at a destination machine, a set of data from a source machine, the set of data including a sealed secret to be migrated from the source machine and a sealed policy for release of the sealed secret, the sealed secret sealed at the source machine with a migration key, the sealed policy sealed at the source machine with a cryptographic key that is known to a key server but not known to the destination machine, the sealed policy comprising the migration key; providing, by the destination machine, at least the sealed policy comprising the migration key to the key server; performing attestation with the key server to attest that the destination machine is entitled to access the sealed secret including at least providing attestation data indicative of boot code measurement of the destination machine for evaluation by the key server; and receiving, from the key server, a returned key that is used to access the sealed secret.