Filing Information

Inventor(s)	Matthias Schunter · Jonathan Poritz · Michael Waidner · Elsie Van Herreweghen ·
Assignee(s)	International Business Machines Corporation ·  View assignee updates
Correspondent	RICHARD M. GOLDMAN ·
Application Number	US11120578
Filing date	05/02/2005
Publication date	11/10/2005
Predicted expiration date	05/02/2025
U.S. Classifications	726/16  ·
International Classifications	--
Kind Code	A1
Foreign Priority	EP04010448.1 - 05/03/2004 ·

Patent Family

Abstract

Method and device for verifying the security of a computing platform. In the method for verifying the security of a computing platform a verification machine is first transmitting a verification request via an integrity verification component to the platform. Then the platform is generating by means of a trusted platform module a verification result depending on binaries loaded on the platform, and is transmitting it to the integrity verification component. Afterwards, the integrity verification component is determining with the received verification result the security properties of the platform and transmits them to the verification machine. Finally, the verification machine is determining whether the determined security properties comply with desired security properties.

Independent Claims | See all claims (9)

1. 1. A method for verifying the security of a computing platform comprising the steps of: a) a verification machine transmitting a verification request via an integrity verification component to the platform, b) the platform generating by means of a trusted platform module a verification result depending on binaries loaded on the platform, and transmitting it to the integrity verification component, c) the integrity verification component determining with the received verification result the security properties of the platform and transmitting them to the verification machine, and d) the verification machine determining whether the determined security properties comply with desired security properties.
2. 9. A device for verifying the security of a computing platform, the device comprising: a) an integrity verification component for transmitting a verification request from a verification machine to the platform; b) the platform comprising a trusted platform module for generating a verification result depending on binaries loaded on the platform, c) wherein the integrity verification component is provided for determining the security properties of the platform with the help of the verification result and for transmitting them to the verification machine, and the verification machine is provided for determining whether the determined security properties comply with desired security properties.