Patent ID: 8452954

Claim:
A system, comprising: a processor to initiate an authentication handshake protocol between a device and a trusted controller system, to relay communications between the device and the trusted controller system during the authentication handshake protocol, and to access a protected portion of the device subsequent to completion of the authentication handshake protocol; and the trusted controller system to perform a server side portion of the authentication handshake protocol outside of an environment of the processor to permit the device to authenticate the trusted controller system, the device, wherein the device includes: an access control system having a default state configured to preclude access to the protected portion of the device; and a device controller to compute and authenticate a hash value of a certificate chain received from the trusted controller system, to verify integrity of messages exchanged with the trusted controller system, and to control the access control system to permit the processor to access the protected portion of the device subsequent to the authentication and the verification, and wherein the processor is configured to, prior to initiating the authentication handshake: determine whether a binding state of the device is un-provisioned such that the device has not been provisioned with a certificate, certificate chain, or hash thereof; determine whether the binding state of the device is provisioned-locked such that the device has been provisioned with a certificate, certificate chain, or hash thereof; and determine whether the binding state of the device is provisioned-unlocked such that the device has been provisioned with a certificate, certificate chain, or a hash thereof, and has authenticated the trusted controller system.