Nokia Solutions and Networks Oy

Nokia Technologies Oy

Nokia Siemens Networks Oy

Manfred Schaefer

Jing Ping

Iris Adam

Wolf-Dietrich Moeller

Stephane Mahieu

Joerg Abendroth

Michael Marhoefer

Cloud service security management in cloud computer environment uses a first computer cloud entity with first security capabilities and under security management coordinated by a first security management service point in compliance with predefined first security requirements. Security management of a second computer cloud entity is coordinated by a second security management service point in compliance with predefined second security requirements. In the managing of the security of the cloud service in the cloud computer environment: a trusted relationship is established between the first and second security management service points, general security requirements for the cloud service are obtained; and a first security policy is defined for the first security management service point, based on the general security requirements for the cloud service, the first security capabilities and the first security requirements, for the running of the cloud service by the first computer cloud entity.

Cloud service security management

To provide access to an account in an apparatus in response to a request to the account, the apparatus creates and forwards a challenge for this request and waits for a token signed by a centralized signing entity for the account, the token comprising access enabling data. When such a token is received, the apparatus validates the token, and only if the validation succeeds, enables access to the account.

Controlling access

A method and a device for data processing are provided comprising a first instance comprising at least one local trusted unit (LTU) and a local trust manager (LTM), the method comprising the step: The local trust manager provides a policy related information to the at least one local trusted unit and/or to a second instance.

Method and device for data processing and communication system comprising such device

Arrangements for updating software, such as initial trusted code and data, are described, including providing proof of execution of the update. The mechanism for updating the software is logically or physically separated from the general purpose CPU of the system. Thus, the update mechanism can be trusted even if the system to be updated may be compromised.

Growing community of inventors

Forstinning, Germany

Manfred Schaefer