cTPM: a cloud TPM for cross-device trusted applications
Policy-sealed data: A new abstraction for building trusted cloud services