Patent ID: 7210034

Claim:
A system for controlling integrity measurement of an un-trusted system component on a client system comprising: a trusted management utility configured to measure the integrity of the un-trusted system component by generating a hash of the un-trusted system component; a trusted fixed token resident on the client system; and a remote server coupled to the client system over a network, the remote server providing a trusted registration service configured to create a signed hash of the trusted management utility, store the signed hash of the trusted management utility in the trusted fixed token, create a security domain associated with the trusted management utility, store the security domain in the trusted fixed token, and dynamically install the trusted management utility on the client system based on an integrity measurement policy; wherein the trusted fixed token is configured to create a signed hash of the trusted management utility and the security domain, to securely communicate the signed hash of the trusted management utility and the security domain to the trusted registration service, to generate a signed hash of the un-trusted system component, the trusted management utility, and the security domain, and to send the signed hash of the un-trusted system component, the trusted management utility, and the security domain to the trusted registration service: and wherein the trusted management utility is deleted from the client system after measuring the integrity of the un-trusted software component.