Patent ID: 8332631

Claim:
A method of provisioning a license and an application program from a first server to a computing platform over a network, the license being encrypted by the first server using a first public key and including a second key, the application program being encrypted by the first server using the second key, comprising: receiving a user password by a host application being executed by a processor of the computing system; deriving, by the host application, a symmetric key at least in part from the user password; sending the license, by the host application, to a license management firmware component of a hardware-implemented security engine within a chipset of the computer system, in a message signed by the symmetric key; deriving, by the license management firmware component, the symmetric key at least in part from the user password stored in a secure storage of the hardware-implemented security engine, verifying the signature on the message using the symmetric key, verifying the first server's signature on the license, and decrypting the license using a first private key of the license management firmware component corresponding to the first public key to obtain the second key; sending, by the license management firmware component, the second key to the host application; and decrypting the application program by the host application using the second key.