Trusted Platform Module Trust Data Porting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems face challenges in securely transferring trust data from a failed system to a replacement system, requiring manual reconfiguration and lacking efficient methods for maintaining data integrity during system replacement.
Innovation Solution
A method involving a system controller that extracts trust data from a trust module using a manufacturer key, encrypts it with a control key, and stores it on a removable storage medium, allowing secure transfer and updating of trust data to a replacement system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If trust data is stored in a trust module using a manufacturer key, then data security is improved, but data portability deteriorates
Solution Approach 1:
The patent extracts trust data from the trust module by using the manufacturer key to access and retrieve the encrypted data. This extracted data can then be transferred to a replacement system, solving the portability issue while maintaining security through the encryption mechanism
Solution Approach 2:
The manufacturer key acts as an intermediary that enables the extraction and transfer of trust data without compromising security. The key mediates between the secured storage in the trust module and the need for data portability to replacement systems
2Reliability
If manual reconfiguration is performed during system replacement, then data integrity can be verified, but replacement time increases
Solution Approach 1:
The trust data is pre-secured with the manufacturer key in the trust module before system failure occurs. This preliminary encryption and preparation of data enables rapid extraction and transfer to replacement systems without requiring time-consuming manual reconfiguration or integrity verification procedures during the replacement process
Data Source
AI summary
A method of porting of trust data includes a computer system extracting trust data from the trust module using a manufacturer key. The trust data and the manufacturer key are then stored, encrypted with a control key, on a removable storage medium.