Patent ID: 8090946

Claim:
An inter-trusted-computing-system binding method based on hardware security unit comprising: step 1 , configuring binding requirements for hardware security units of trusted computing systems, each trusted computing system having a hardware security unit equipped therewith; step 2 , exchanging hardware security unit information between the hardware security units of the trusted computing systems to be bound, and checking device validities of the counter-party hardware security unit by use of completeness checking algorithms at both trusted computing systems to be bound; step 3 , exchanging user information, hardware security unit information and platform information between the hardware security units of the trusted computing systems to be bound, and respectively verifying whether the binding meets their respective binding requirements by the hardware security units of the trusted computing system to be bound according to the exchanged information at both trusted computing systems to be bound, the platform information including hardware information and software information of the trusted computing systems; and step 4 , respectively storing counter-party platform information and hardware security unit binding information by both hardware security units of the trusted computing systems, wherein said binding requirements further include a security level for indicating a range in which the hardware security unit may use the functions, rights and services of the counter-party bound hardware security unit.