公开(公告)号：US20210365529A1

公开(公告)日：2021-11-25

申请号：US16763496

申请日：2018-03-12

Applicant: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.

Inventor： ADRIAN BALDWIN ,  JAMES ROBERT WALDRON ,  MIKE PROVENCHER

IPC: G06F21/30

Abstract: A device platform, in some examples, comprises a security processor that may create a private/public cryptographic key pair, and data representing evidence of creation of the key pair, provide access to the key pair and data from an operating system component of the device platform, where the public key part of the key pair may be used to verify management commands. The device platform may validate the key pair and data in a trusted execution state.

公开(公告)号：US20210192051A1

公开(公告)日：2021-06-24

申请号：US16755820

申请日：2018-01-29

Applicant: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.

Inventor： JAMES ROBERT WALDRON ,  ADRIAN BALDWIN ,  RICK BRAMLEY

IPC: G06F21/57 ,  H04L9/32 ,  G06F21/60

Abstract: A method, in an example, for secure key exchange in a platform, the method comprises checking a value of parameter via a platform hardware initialisation device to determine a status of an agent, generating at least one symmetric cryptographic key, encrypting the at least one symmetric cryptographic key using a public cryptographic key, generating a variable representing the encrypted at least one symmetric cryptographic key, and enabling access to the variable from the agent via the platform hardware initialisation device.

公开(公告)号：US20210182434A1

公开(公告)日：2021-06-17

申请号：US16771181

申请日：2018-03-12

Applicant: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.

Inventor： ADRIAN BALDWIN ,  JAMES ROBERT WALDRON ,  DAVID PLAQUIN

IPC: G06F21/72 ,  H04L9/08 ,  G06F21/57 ,  H04L9/32

Abstract: In an example, there is provided a method for attesting to a management state of a device platform configuration, based on a signed data structure that represents a device management status and a time-based value from a secure cryptoprocessor of the device. The signed data structure is sent to a management system for validation based on a comparison to the state of the cryptoprocessor at the time of signing the data structure.