Google Inc.

Jordan Thomas Hand

Jeffrey Thomas Andersen

Vidya Bharat Satyamsetti

Christopher Edward Fenner

Provided are computing systems that feature a centralized attestation device able to perform attestation on behalf of a number of different platform components. More particularly, the present disclosure provides extensible mechanisms for representing trustworthiness statements by an attester device within a platform either as implicit attestation or explicit attestation. Thus, according to one aspect of the present disclosure, a computing system can include an attester device that implements a hybrid model for presenting evidence of measurements of all the components in a platform to a verifier.

Computing systems featuring centralized attestation device

The present disclosure provides systems and methods for demonstrating the identity of a central processing unit (CPU) to a Trusted Platform Module (TPM) with improved security against, for example, interposers on a communications bus. In particular, according to an aspect of the present disclosure, a CPU can generate a policy alias key that can be used to sign a challenge to prove the identity of the CPU to the TPM. Specifically, the policy alias key can be generated by the CPU by performing a key derivation function on a combined identity value generated by the CPU for the CPU and TPM. The combined identity value can be generated by the CPU from a CPU device identity value and a public endorsement key (EK) associated with the TPM.

Growing community of inventors

Woodinville, WA, United States of America

Jordan Thomas Hand