Patent ID: 8504838
Filing Date: 2013-08-06
Classification: G06F,G06Q,G07F,H04L

Abstract:
1. A method for enrolling a client computer for use with a smart card, the method comprising: receiving, by a server computer from the client computer, an integrity key that includes a system code that uniquely identifies a configuration state of the client computer and that is held tamperproof by the client computer, the integrity key generated based on the system code and a storage root key that is held secret by the client computer, the integrity key stored securely on the client computer; verifying, by the server computer, that the received integrity key is listed on a list, and that the received system code represents an authorized configuration state, where the list comprises authorized system codes that each refer to an authorized client computer configuration; encrypting, by the server computer in response to the verifying, a group key using the received integrity key resulting in an encrypted group key, the group key representing a group to which a user belongs; and securely storing, by the server computer, the encrypted group key on the client computer.