Patent ID: 7770000

Claim:
A method for verifying the security of a computing platform, the method comprising: receiving, at an integrity verification component (IVC) embodied by one of: a hardware component, a firmware component and a processor executed software component, a platform verification request from a verification machine, the platform verification request including a challenge command, an attestation identify key corresponding to the computing platform to be verified, and a trusted verification policy, wherein the IVC comprises a separate, intermediate entity with respect to the computing platform and the verification machine; based upon the platform verification request received from the verification machine, transmitting from the IVC to the computing platform, a measurement request containing the challenge command and the attestation identify key, without the trusted verification policy; receiving, at the IVC, measurement results from the computing platform responsive to the measurement request, and generating, within the IVC, a verification result based on the verification request, the measurement results, configuration descriptors, and a configuration assurance certificate; and transmitting, from the IVC to the verification machine, a platform assurance status, the platform assurance status including the security properties determined by the IVC to the verification machine, wherein the security properties comprise a result of whether a security statement is either fulfilled or not; wherein the verification machine is configured to determine whether the security properties transmitted by the IVC comply with desired security properties.