Sony Corporation

Sony Electronics Inc

Sony Electroinics, Inc.

Zhengrong Liu

Nicholas Szeto

Shinichi Takemura

Harold Aaron Ludtke

Tomoyuki Ono

Yutaka Miyoshi

Ikuo Shinozaki

Yusuf Wilajati Purna

Takemura Shinichi

A trusted platform in a digital processing system is maintained even when modules, or other processes or data, are loaded after a boot sequence. A configuration file is used to include measurements (e.g., hash values, signatures, etc.) of modules to be loaded. After secure boot-up the operating system kernel uses the configuration file to check module integrity prior to loading and executing. If a module does not verify against the configuration file data then the system can prevent further operation, restrict certain operations, indicate the non-trusted nature of the system or take other actions. In one embodiment, if a module does not pass the integrity check then the failed measurement is extended into a specific Platform Configuration Register (PCR) within a Trusted Platform Manager (TPM) process. Subsequently, client applications can determine if the platform is trustable based on the return of the PCR value. A local application (application running in the same platform) can 'seal' secrets to a trusted platform. The operation of the application relies on the secrets, which can only be revealed in a trusted platform.

Establishing a trusted platform in a digital processing system

A method and apparatus for authorizing a file to use stored information for executing a process in a Linux operating system. The file includes an executable linking format, an application authorization data, and other attributes for the application.

System and method for authorizing the use of stored information in an operating system

A system to manage and control usage rights for cryptographic keys. A kernel process is provided with secure and exclusive authorization to access certain keys in a key hierarchy. Special authorization is required for other processes or users to access keys used by the kernel. A persistent storage area is used to hold a Kernel Authorization Data field for the root key and/or other keys used by the kernel or other specialized processes. The authorization data, and the keys it protects, can be used to protect other portions of, or the entire, key structure. The persistent storage area is reserved in a TPM or similar security hardware.

Use of kernel authorization data to maintain security in a digital processing system

Growing community of inventors

Foster City, CA, United States of America

Zhengrong Liu