Patent ID: 8555072

Claim:
A method for attesting a defined configuration of a computing platform to a verifier, the method comprising: generating a non-migratable signature key (SK) comprising a public key and a private key, which SK can only be used with the computing platform with a defined platform configuration; providing the public key of the signature key (SK) which is bound to the computing platform and bound to the defined platform configuration of the computing platform and data (PCR sk ) indicative of said defined configuration; obtaining from an evaluator a credential (C(SK), CD AA (SK)) for the signature key (SK), the credential being generated using the public key and certifying that the signature key (SK) is bound to a trusted platform configuration based on said data (PCR sk ), wherein the defined trusted platform configuration is said trusted platform configuration; and demonstrating to the verifier an ability to sign a challenge from the verifier using the private key of the signature key (SK), and returning the signed challenge to the verifier with the public key of the signature key (SK); and demonstrating possession of the credential (C(SK), CD AA (SK)) to the verifier, thereby attesting that the computing platform has said trusted platform configuration without disclosing the defined platform configuration of the computing platform to the verifier.