Patent ID: 7587595

Claim:
A method comprising: creating a first set of one or more device models (DMs) in a processing system, the first set of DMs based at least in part on a first device model design corresponding to a first physical trusted platform module (TPM), and creating a second set of one or more DMs in the processing system, the second set of DMs based at least in part on a second device model design corresponding to a second security coprocessor, wherein the second security coprocessor is of a different type than the first physical TPM; receiving, at one of the first set of DMs, information from a first software entity outside a protected portion of the processing system; and in response to receiving the information from the first software entity at the one of the first set of DMs, emulating the first physical TPM by providing the first software entity with cryptographic services in accordance with the first device model design, wherein the first and second device model designs each comprise a definition of an interface for software entities outside the protected portion of the processing system to use for communicating with instances of the device model.