The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 9690941 B1

PDF
Full Text
Expired
Date of Patent:
Jun. 27, 2017

Filed:

May. 17, 2011
Applicants:

Stefan Thom, Snohomish, WA (US);

Robert Karl Spiger, Seattle, WA (US);

Valerie Kathleen Bays, Redmond, WA (US);

BO Gustaf Magnus Nyström, Sammamish, WA (US);

Inventors:

Stefan Thom, Snohomish, WA (US);

Robert Karl Spiger, Seattle, WA (US);

Valerie Kathleen Bays, Redmond, WA (US);

Bo Gustaf Magnus Nyström, Sammamish, WA (US);

Assignee:
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/57 (2013.01); G06F 21/62 (2013.01); G06F 21/60 (2013.01);
U.S. Cl.
CPC ...
G06F 21/57 (2013.01); G06F 21/602 (2013.01); G06F 21/6209 (2013.01); H04L 2209/127 (2013.01);
Abstract

One or more techniques and/or systems are provided for provisioning encrypted key blobs and client certificates. That is, a trusted execution environment on a first machine may provide a key service provider with a cryptographic encryption key. The key service provider may encrypt a key blob using the cryptographic encryption key and/or wrap the encrypted key blob with one or more policies, such as a platform policy. The key service provider may provision the encrypted key blob to a client on the first machine. The client may submit the encrypted key blob to the trusted execution environment for validation so that the client may perform key actions, such as sign an email or encrypt data. Because the key blob may be specific to a particular trusted execution environment and/or machine, the key service provider may re-wrap the key blob if the client 'roams' to a second machine.


Find Patent Forward Citations

Loading…