The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 25, 2010

Filed:

Jan. 07, 2005
Applicants:

Jamie Hunter, Bothell, WA (US);

Paul England, Bellevue, WA (US);

Russell Humphries, Redmond, WA (US);

Stefan Thom, Snohomish, WA (US);

James Anthony Schwartz, Jr., Seattle, WA (US);

Kenneth D Ray, Seattle, WA (US);

Jonathan Schwartz, Kirkland, WA (US);

Inventors:

Jamie Hunter, Bothell, WA (US);

Paul England, Bellevue, WA (US);

Russell Humphries, Redmond, WA (US);

Stefan Thom, Snohomish, WA (US);

James Anthony Schwartz, Jr., Seattle, WA (US);

Kenneth D Ray, Seattle, WA (US);

Jonathan Schwartz, Kirkland, WA (US);

Assignee:

Microsoft Corporation, Redmond, WA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/02 (2006.01); G06F 21/22 (2006.01);
U.S. Cl.
CPC ...
Abstract

In a computer with a trusted platform module (TPM), an expected hash value of a boot component may be placed into a platform configuration register (PCR), which allows a TPM to unseal a secret. The secret may then be used to decrypt the boot component. The hash of the decrypted boot component may then be calculated and the result can be placed in a PCR. The PCRs may then be compared. If they do not, access to the an important secret for system operation can be revoked. Also, a first secret may be accessible only when a first plurality of PCR values are extant, while a second secret is accessible only after one or more of the first plurality of PCR values has been replaced with a new value, thereby necessarily revoking further access to the first secret in order to grant access to the second secret.


Find Patent Forward Citations

Loading…