US20030196085A1 — System and method for authenticating an operating…

Claim 1

Independent Claim 56 words

1 . In a computer system having a processor, an operating system (OS), and a software identity register that holds an identity of the operating system, the processor having a private key, a method comprising: forming an OS certificate containing the identity from the software identity register; and signing the OS certificate using the private key.

Claim 2

Dependent Claim 56 words

1 . In a computer system having a processor, an operating system (OS), and a software identity register that holds an identity of the operating system, the processor having a private key, a method comprising: forming an OS certificate containing the identity from the software identity register; and signing the OS certificate using the private key.

Claim 3

Dependent Claim 20 words

2 . A method as recited in claim 1 , wherein the OS certificate further contains the processor public key.

Claim 4

Dependent Claim 18 words

3 . A method as recited in claim 1 , wherein the processor includes the software identity register.

Claim 5

Dependent Claim 19 words

4 . A method as recited in claim 1 , wherein the processor comprises a central processing unit (CPU).

Claim 6

Dependent Claim 21 words

5 . A method as recited in claim 1 , wherein the processor is part of a central processing unit (CPU).

Claim 7

Dependent Claim 31 words

6 . A method as recited in claim 1 , further comprising submitting the signed OS certificate to a recipient to prove the identity of the operating system to the recipient.

Claim 8

Dependent Claim 17 words

7 . A method as recited in claim 6 , wherein the recipient comprises a content provider.

Claim 9

Dependent Claim 47 words

8 . A method as recited in claim 1 , wherein forming the OS certificate comprises forming the OS certificate with one or more items from a boot log containing identities of software components that are executing on a central processing unit (CPU) of the computer system.

Claim 10

Dependent Claim 58 words

9 . In a computer system having a processor and an operating system (OS), the processor having both a private key of a public/private key pair and a software identity register that holds an identity of the operating system, a method comprising: obtaining the identity of the operating system; and signing the identity using the processor private key.

Claim 11

Dependent Claim 58 words

9 . In a computer system having a processor and an operating system (OS), the processor having both a private key of a public/private key pair and a software identity register that holds an identity of the operating system, a method comprising: obtaining the identity of the operating system; and signing the identity using the processor private key.

Claim 12

Dependent Claim 21 words

10 . A method as recited in claim 9 , wherein the processor comprises part of a central processing unit (CPU).

Claim 13

Dependent Claim 21 words

11 . A method as recited in claim 9 , wherein the processor is separate from the central processing unit (CPU).

Claim 14

Dependent Claim 27 words

12 . A method as recited in claim 9 , wherein obtaining the identity of the operating system comprises retrieving the identity from the software identity register.

Claim 15

Dependent Claim 30 words

13 . A method as recited in claim 9 , further comprising submitting the signed identity to a recipient to prove the identity of the operating system to the recipient.

Claim 16

Dependent Claim 17 words

14 . A method as recited in claim 13 , wherein the recipient comprises a content provider.

Claim 17

Dependent Claim 151 words

15 . A system comprising: a client having a processor and an operating system (OS), the processor having a private key, a manufacturer certificate supplied by a manufacturer of the processor, and a software identity register that holds an identity of the operating system, the client being configured to submit a request over a network; a computer system having a server to serve content to the client, the computer system being configured to receive the request over the network, generate a challenge nonce, and return the challenge nonce to the client; and the client being further configured to form an OS certificate containing both the identity from the software identity register and the challenge nonce, and to sign the OS certificate using the private key, the client returning the OS certificate and the processor manufacturer certificate to the computer system for evaluation to determine whether to reject or fulfill the request.

Claim 18

Dependent Claim 151 words

15 . A system comprising: a client having a processor and an operating system (OS), the processor having a private key, a manufacturer certificate supplied by a manufacturer of the processor, and a software identity register that holds an identity of the operating system, the client being configured to submit a request over a network; a computer system having a server to serve content to the client, the computer system being configured to receive the request over the network, generate a challenge nonce, and return the challenge nonce to the client; and the client being further configured to form an OS certificate containing both the identity from the software identity register and the challenge nonce, and to sign the OS certificate using the private key, the client returning the OS certificate and the processor manufacturer certificate to the computer system for evaluation to determine whether to reject or fulfill the request.

Claim 19

Dependent Claim 19 words

16 . A system as recited in claim 15 , wherein the processor comprises a central processing unit (CPU).

Claim 20

Dependent Claim 21 words

17 . A system as recited in claim 15 , wherein the processor is part of a central processing unit (CPU).

Claim 21

Dependent Claim 27 words

18 . The system as recited in claim 15 , wherein the computer system is configured to determine whether to trust the identity in the OS certificate.

Claim 22

Dependent Claim 36 words

19 . The system as recited in claim 15 , wherein the computer system is configured to determine whether the challenge nonce returned in the OS certificate is the challenge nonce generated by the computer system.

Claim 23

Dependent Claim 31 words

20 . The system as recited in claim 15 , wherein the computer system is configured to verify the signature on the OS certificate using a public key of the processor.

Claim 24

Dependent Claim 23 words

21 . The system as recited in claim 20 , wherein the public key of the processor is included in the manufacturer certificate.

Claim 25

Dependent Claim 25 words

22 . The system as recited in claim 15 , wherein the computer system is configured to verify a manufacturer signature on the manufacturer certificate.

Claim 26

Dependent Claim 26 words

23 . The system as recited in claim 15 , wherein the computer system is configured to determine whether to trust the manufacturer of the processor.

Claim 27

Dependent Claim 36 words

24 . The system as recited in claim 15 , wherein the computer system is configured to download the content specified in the request in an event that the computer system elects to fulfill the request.

Claim 28

Dependent Claim 26 words

25 . The system as recited in claim 15 , wherein the computer system comprises a content provider and wherein the client comprises a subscriber unit.

Claim 29

Dependent Claim 74 words

26 . For execution on a computer system having a processor, an operating system (OS), and a software identity register that holds an identity of the operating system, the processor having a private key, a computer program stored on one or more computer-readable storage media of the computer system; the program comprising: forming an OS certificate containing the identity from the software identity register; and signing the OS certificate using the processor private key.

Claim 30

Dependent Claim 74 words

26 . For execution on a computer system having a processor, an operating system (OS), and a software identity register that holds an identity of the operating system, the processor having a private key, a computer program stored on one or more computer-readable storage media of the computer system; the program comprising: forming an OS certificate containing the identity from the software identity register; and signing the OS certificate using the processor private key.

Claim 31

Dependent Claim 19 words

27 . A program as recited in claim 26 , wherein the processor comprises a central processing unit (CPU).

Claim 32

Dependent Claim 21 words

28 . A program as recited in claim 26 , wherein the processor is separate from the central processing unit (CPU).

Claim 33

Dependent Claim 31 words

29 . A program as recited in claim 26 , further comprising submitting the signed OS certificate to a recipient to prove the identity of the operating system to the recipient.

Claim 34

Dependent Claim 17 words

30 . A program as recited in claim 29 , wherein the recipient comprises a content provider.

Claim 35

Dependent Claim 47 words

31 . A program as recited in claim 26 , wherein forming the OS certificate comprises forming the OS certificate with one or more items from a boot log containing identities of software components that are executing on a central processing unit (CPU) of the computer system.

Claim 36

Dependent Claim 18 words

32 . A program as recited in claim 26 , wherein the processor includes the software identity register.

Claim 37

Dependent Claim 178 words

33 . In a system having a client and a computer, in which the client has a processor and an operating system (OS) and the processor further includes a private key, a manufacturer certificate supplied by a manufacturer of the processor, and a software identity register that holds an identity of the operating system, a computer program stored on one or more computer-readable storage media resident at the client and computer for establishing a chain of trust between the client and the computer, the program comprising: submitting a request from the client to the computer, the request specifying a particular content; generating, at the computer, a challenge nonce; returning the challenge nonce from the computer to the client; forming, at the client, an OS certificate containing the identity from the software identity register and signing the OS certificate using the private key; passing the OS certificate and the processor manufacturer certificate from the client to the computer; and evaluating, at the computer, the OS certificate and the processor manufacturer to determine whether to reject or fulfill the request.

Claim 38

Dependent Claim 178 words

33 . In a system having a client and a computer, in which the client has a processor and an operating system (OS) and the processor further includes a private key, a manufacturer certificate supplied by a manufacturer of the processor, and a software identity register that holds an identity of the operating system, a computer program stored on one or more computer-readable storage media resident at the client and computer for establishing a chain of trust between the client and the computer, the program comprising: submitting a request from the client to the computer, the request specifying a particular content; generating, at the computer, a challenge nonce; returning the challenge nonce from the computer to the client; forming, at the client, an OS certificate containing the identity from the software identity register and signing the OS certificate using the private key; passing the OS certificate and the processor manufacturer certificate from the client to the computer; and evaluating, at the computer, the OS certificate and the processor manufacturer to determine whether to reject or fulfill the request.

Claim 39

Dependent Claim 19 words

34 . A program as recited in claim 33 , wherein the processor comprises a central processing unit (CPU).

Claim 40

Dependent Claim 21 words

35 . A program as recited in claim 33 , wherein the processor is separate from the central processing unit (CPU).

Claim 41

Dependent Claim 24 words

36 . A program as recited in claim 33 , wherein the client comprises a subscriber unit and the computer comprises a content provider.

Claim 42

Dependent Claim 64 words

37 . In a computer system having a cryptographic mechanism, an operating system (OS), and a software identity register that holds an identity of the operating system, the cryptographic mechanism having a private key of a pair of private and public keys, a method comprising: obtaining the identity of the operating system; and signing the identity using the private key of the cryptographic mechanism.

Claim 43

Dependent Claim 64 words

37 . In a computer system having a cryptographic mechanism, an operating system (OS), and a software identity register that holds an identity of the operating system, the cryptographic mechanism having a private key of a pair of private and public keys, a method comprising: obtaining the identity of the operating system; and signing the identity using the private key of the cryptographic mechanism.

Claim 44

Dependent Claim 62 words

38 . A method as recited in claim 37 , wherein: obtaining the identity of the operating system comprises forming an OS certificate containing the identity from the software identity register and information describing the operating system; and signing the identity using the private key of the cryptographic mechanism comprises signing the OS certificate using the private key of the cryptographic mechanism.

Claim 45

Dependent Claim 24 words

39 . A method as recited in claim 37 , wherein the cryptographic mechanism comprises at least part of a central processing unit (CPU).

Claim 46

Dependent Claim 22 words

40 . A method as recited in claim 37 , wherein the cryptographic mechanism is separate from a central processing unit (CPU).

Claim 47

Dependent Claim 30 words

41 . A method as recited in claim 37 , further comprising submitting the signed identity to a recipient to prove the identity of the operating system to the recipient.

Claim 48

Dependent Claim 17 words

42 . A method as recited in claim 41 , wherein the recipient comprises a content provider.

Claim 49

Dependent Claim 19 words

43 . A method as recited in claim 37 , wherein the cryptographic mechanism includes the software identity register.

Claim 50

Dependent Claim 73 words

44 . One or more computer readable media having stored thereon a plurality of instructions that, when executed in a computer system having a cryptographic mechanism and an operating system (OS), causes the computer system to: form an OS certificate containing an identity of the operating system from a software identity register; and sign the OS certificate using a private key of a pair of private and public keys of the cryptographic mechanism.

Claim 51

Dependent Claim 73 words

44 . One or more computer readable media having stored thereon a plurality of instructions that, when executed in a computer system having a cryptographic mechanism and an operating system (OS), causes the computer system to: form an OS certificate containing an identity of the operating system from a software identity register; and sign the OS certificate using a private key of a pair of private and public keys of the cryptographic mechanism.

Claim 52

Dependent Claim 28 words

45 . One or more computer readable media as recited in claim 44 , wherein the cryptographic mechanism is at least part of a central processing unit (CPU).

Claim 53

Dependent Claim 35 words

46 . One or more computer readable media as recited in claim 44 , further comprising submitting the signed OS certificate to a recipient to prove the identity of the operating system to the recipient.

Claim 54

Dependent Claim 21 words

47 . One or more computer readable media as recited in claim 46 , wherein the recipient comprises a content provider.

Claim 55

Dependent Claim 51 words

48 . One or more computer readable media as recited in claim 44 , wherein forming the OS certificate comprises forming the OS certificate with one or more items from a boot log containing identities of software components that are executing on a central processing unit (CPU) of the computer system.

Claim 56

Dependent Claim 60 words

49 . A system comprising: a first processor, wherein the first processor comprises a central processing unit (CPU); and a second processor having a key pair including a private key and a public key, wherein the private key is to be used by the second processor to sign an identity of an operating system being executed by the first processor.

Claim 57

Dependent Claim 60 words

49 . A system comprising: a first processor, wherein the first processor comprises a central processing unit (CPU); and a second processor having a key pair including a private key and a public key, wherein the private key is to be used by the second processor to sign an identity of an operating system being executed by the first processor.

Claim 58

Dependent Claim 28 words

50 . A system as recited in claim 49 , wherein the first processor further includes a software identity register that holds the identity of the operating system.

Claim 59

Dependent Claim 55 words

51 . A system as recited in claim 49 , further comprising a memory, coupled to the first and second processors, configured to store instructions that, when executed by the first processor, cause the first processor to submit the signed identity to a recipient to prove the identity of the operating system to the recipient.

Claim 60

Dependent Claim 17 words

52 . A system as recited in claim 49 , wherein the recipient comprises a content provider.

System and method for authenticating an operating system

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag