Patent ID: 7082615

Claim:
An apparatus comprising: a key generator to generate an operating system nub key (OSNK) unique to an operating system (OS) nub, the OS nub being part of an operating system to run on a platform comprising a processor capable of operating in an isolated execution mode in a ring 0 operating mode, wherein the processor also supports one or more higher ring operating modes, as well as a normal execution mode in at least the ring 0 operating mode; and a usage protector coupled to the key generator to protect usage of a subset of a software environment using the OSNK; the key generator to generate the OSNK based at least in part on a master binding key (BK 0 ) of the platform and an identification of the OS nub; wherein the usage protector performs at least one operation selected from the group consisting of: encrypting a value while operating in isolated execution mode; and decrypting an encrypted value while operating in isolated execution mode.