International Business Machines Corporation

Endre Felix Bangerter

Jan Leonard Camenisch

Michael Waidner

Matthias Schunter

Charles Campbell Palmer

Steven B Adler

Arthur Miles Gilbert

Nigel Howard Julian Brown

Michael Schnyder

Dogan Kesdogan

Adam Charles Nelson

Michael Robert McCullough

Xuan Liu

Guenter Karjoth

Edith Gail Schonberg

Kathryn Ann Bohrer

Calvin Stacy Powers

Elsie A Van Herreweghen

Martin Joseph Clayton Presler-Marshall

Elsie Van Herreweghen

Matthew P Leonard

Systems, apparatus and methods for privacy-protecting integrity attestation of a computing platform. An example method for privacy-protecting integrity attestation of a computing platform (P) has a trusted platform module (TPM), and comprises the following steps. First, the computing platform (P) receives configuration values (PCRPCRn). Then, by means of the trusted platform module (TPM), a configuration value (PCRp) is determined which depends on the configuration of the computing platform (P). In a further step the configuration value (PCRp) is signed by means of the trusted platform module. Finally, in the event that the configuration value (PCRp) is one of the received configuration values (PCRPCRn), the computing platform (P) proves to a verifier (V) that it knows the signature (sign(PCRp)) on one of the received configuration values (PCRPCRn).

Privacy-protecting integrity attestation of a computing platform

In a computer, a first set of object classes are provided representing active entities in an information-handling process and a second set of object classes are provided representing data and rules in the information-handling process. At least one object class has rules associated with data. The above-mentioned objects are used in constructing a model of an information-handling process, and to provide an output that identifies at least one way in which the information-handling process could be improved. One aspect is a method for handling personally identifiable information. Another aspect is a system for executing the method of the present invention. A third aspect is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

Using an object model to improve handling of personally identifiable information

The present invention is a system and method for handling personally identifiable information, using a rules model. The invention involves defining a limited number of privacy-related actions regarding personally identifiable information; constructing a rule for each circumstance in which one of said privacy-related actions may be taken or must be taken; allowing for the input of dynamic contextual information to precisely specify the condition for evaluation of a rule; creating a programming object containing at least one of said rules; associating the programming object with personally identifiable information; processing a request; and providing an output. The invention does not merely give a 'yes-or-no answer. The invention has the advantage of being able to specify additional actions that must be taken. The invention may use a computer system and network. One aspect of the present invention is a method for handling personally identifiable information. Another aspect of the present invention is a system for executing the method of the present invention. A third aspect of the present invention is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

Using a rules model to improve handling of personally identifiable information

Growing community of inventors

Ligerz, Switzerland

Endre Felix Bangerter