Patent ID: 7424610
Filing Date: 2008-09-09
Classification: G06F

Abstract:
1. A method comprising: associating platform credentials to a hardware trusted computing base (TCB) of a target computer system to establish trustworthiness of the hardware TCB, wherein the platform credentials include a private-public key pair having a private key and a public key to perform secure attestation by the hardware TCB; remotely provisioning security policy files and a mandatory access control (MAC)-based operating system on the target computer system, wherein the remotely provisioning of the security policy files and the MAC-based operating system is performed via a remotely-initiated secure boot process, wherein the remotely provisioning of the security policy files includes remotely transferring the security policy files to the target computer system; and establishing trustworthiness of the MAC-based operating system by measuring identity of the MAC-based operating system via the hardware TCB, and compiling results of the identity measurement into a first cryptographically signed measurement report that is rooted in a trusted platform module (TPM) of the hardware TCB, and submitting the first signed report to a remote provisioning computer system via a cryptographically-secured attestation protocol.