Patent · US Active

System and method for binding applications to a root of trust

US11663344B2 · kind B2 · utility

0Cited by
0References
14Claims
0Family size

Assignee

Inventors

Key dates

Filing dateMay 27, 2021
Grant dateMay 30, 2023
Priority date
Expiry dateDec 17, 2041

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F21/64
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

A method for binding applications to a platform root of trust includes pre-provisioning application binding components in an information handling system. An application requesting OS access sends its access control list (ACL) and application metadata to the BIOS, which performs initial checks. The BIOS responds with platform metadata and a first nonce. The application communicates the metadata, the first nonce and a second nonce to a server. The server checks the nonces and metadata, creates a third nonce and an application binding object (ABO). The application checks the nonces and sends a binding certificate to the BIOS. The BIOS checks the nonces, creates a binding certificate, verifies the binding certificate and sends a binding session credential (BSC) to the application. The application binds the BSC with platform credentials.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.