Microsoft Technology Licensing, LLC

Christopher Edward Fenner

Peter David Waxman

Himanshu Soni

Prabu Raju

Cristian Stefan Salvan

Kam Kouladjie

Gabriel Fortunato Stocco

Giridhar Viswanathan

Gridhar Viswanathan

Implementations described herein disclose a platform configuration register (PCR) attestation system using a trusted platform module (TPM) of a device. The PCR attestation system provides one or more computer executable instructions to create a non-volatile (NV) index in a TPM of the computing device, with a PCR policy specifying that the values of PCRs on the TPM are equal to predetermined set of values, and if the PCR policy is satisfied, setting a value of an NVWritten attribute to specify that the PCR policy was satisfied since the last time the device booted.

Ex post facto platform configuration attestation

Implementations described herein disclose a device identity management system using a trusted platform module (TPM) of a device. The device identity management system provides one or more computer executable instructions to receive a secret random number at a trusted platform module (TPM) of a device, generate a hash of an existing device identity stored in a non-volatile (NV) identity index using the secret random number, and store the hash as the device identity in the NV identity index.

Attestable and destructible device identity

The present invention provides for streamlined issuance of certificates and other tokens that are contingent on key attestation of keys from a trusted platform module within a computing platform. Various methods are described for wrapping the requested token in a secret, such as an AES key, that is encrypted to a TPM based key in a key challenge. If the requesting platform fails the key challenge, the encrypted certificate or token cannot be decrypted. If requesting platform passes the challenge, the encrypted certificate or token can be decrypted using the AES key recovered from the key challenge.

Key-attestation-contingent certificate issuance

Growing community of inventors

Seattle, WA, United States of America

Christopher Edward Fenner