Google Inc.

Jeffrey Thomas Andersen

Uday R Savagaonkar

Thomas Michael Roeder

Anna Sapek

Vidya Bharat Satyamsetti

Jordan Thomas Hand

Christopher Edward Fenner

Provided are computing systems that feature a centralized attestation device able to perform attestation on behalf of a number of different platform components. More particularly, the present disclosure provides extensible mechanisms for representing trustworthiness statements by an attester device within a platform either as implicit attestation or explicit attestation. Thus, according to one aspect of the present disclosure, a computing system can include an attester device that implements a hybrid model for presenting evidence of measurements of all the components in a platform to a verifier.

Computing systems featuring centralized attestation device

The present disclosure provides systems and methods for demonstrating the identity of a central processing unit (CPU) to a Trusted Platform Module (TPM) with improved security against, for example, interposers on a communications bus. In particular, according to an aspect of the present disclosure, a CPU can generate a policy alias key that can be used to sign a challenge to prove the identity of the CPU to the TPM. Specifically, the policy alias key can be generated by the CPU by performing a key derivation function on a combined identity value generated by the CPU for the CPU and TPM. The combined identity value can be generated by the CPU from a CPU device identity value and a public endorsement key (EK) associated with the TPM.

Systems and methods for demonstrating identity to a trusted platform module

Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.

Growing community of inventors

Kirkland, WA, United States of America

Jeffrey Thomas Andersen