Patent ID: 8539551

Claim:
A trusted computing method, comprising: generating a dedicated virtual machine image (DVMI) including an application for a target service provider and only operating system (OS) functionality for the application of the target service provider, and reducing OS file system usage of the application for the target service provider by using a memory image and/or a file system image of files to transact with the target service provider; storing the DVMI in a portable computing device; responsive to a communicable connection by the portable computing device to a host device, executing a process of: verifying the host device by: executing a host verifier on the portable computing device, retrieving by the host verifier a host measurement from the host device, transmitting the host measurement to a server of the target service provider, verifying by the target service provider server the host device based upon the host measurement, and launching the DVMI in the host device as a dedicated virtual machine (DVM) by: requesting by the host device a token from the target service provider server including transmitting, to the target service provider server, a measurement of both the host device including the DVM and a measurement of the portable computing device, determining by the target service provider whether to issue a token based on the measurement information sent from the host device, and launching the DVM upon receipt of the token by the host device, wherein a determination by the target service provider of a trust level for the DVM is based upon the verifying and a level of service provided by the target service provider to the DVM is according to the trust level of the DVM.