Patent ID: 7437752

Claim:
Logic encoded on a computer-readable medium, the logic executable on a hand-holdable computer to provide a trusted computing environment on the hand-holdable computer, comprising: a communication module that communicates with a gatekeeper to receive an encrypted policy package from a central server; an encryption-decryption module that decrypts the encrypted policy package using a policy key, thereby creating an unencrypted policy package; a user interface module that receives user input including a password from a user of the hand-holdable computer; an authentication module coupled with the user interface module to receive the user input and to verify that the password authenticates the user as an authorized user of the hand-holdable computer; a rules engine that enforces an enterprise security policy contained in the unencrypted policy package; and an audit log module coupled to the rules engine to receive a policy enforcement record, and further coupled to the encryption-decryption module to encrypt the policy enforcement record, and operable to store the encrypted policy enforcement record to an encrypted security log, wherein the rules engine and audit log module interoperate to provide a tamper-resistant trusted computing environment that enforces a centrally managed enterprise security policy on the hand-holdable computer even when the hand-holdable computer is not connected to a network.