Patent ID: 8171295
Filing Date: 2012-05-01
Classification: G06F,H04L

Abstract:
1. A server apparatus connected to a network for providing processed data on demand through said network and for hosting a plurality of resources, said server apparatus comprising: a trusted platform module that is trusted based on an apparatus root of trust and upon starting or resetting of said server apparatus, for generating a signature value, said signature value comprising: a communication part for receiving a request through said network from a remote information processing apparatus and for transmitting said signature value and processed data through said network to said remote information processing apparatus; wherein said server apparatus creates a new domain, the new domain permitting access by the remote information processing apparatus to a subset of said plurality of resources, wherein said plurality of resources is organized as a tree such that said subset of said plurality of resources comprises a sub-tree of said tree, said sub-tree holding a domain secret associated with the new domain and being associated with a domain root key, and wherein the trusted platform module protects the domain secret by requiring a proof of possession of an authorization secret associated with the domain root key prior to creating the new domain; and wherein said server apparatus permits accesses to said subset of said plurality of resources by said remote information processing apparatus via said new domain upon receiving a request from said remote information processing apparatus in response to said signature value.