Apparatus, system, and method for authentication of a core root of trust measurement chain

1. An apparatus comprising:

a retrieval module configured to retrieve a measurement value from a predetermined location on a device selected for authentication for unlocking a decryption key, a correct measurement value enabling unlocking of the decryption key;

a decryption module in communication with the retrieval module, the decryption module configured to decrypt an external authentication signal using the unlocked decryption key prior to executing a local boot block of the device, the authentication signal stored external to the device, the authentication signal comprising a message that once decrypted and presented to a user is recognizable by the user; and

a communication module in communication with the decryption module, the communication module configured to communicate the decrypted authentication signal to a user as one or more of a visual and audible signal discernible by the user to determine that the authentication signal was correctly decrypted.

2. The apparatus of claim 1 , wherein the retrieval module further comprises a Trusted Platform Module (TPM) interface configured to determine an operation state of a TPM, and wherein the decryption module decrypts the authentication signal in response to a determination that the TPM is operating in a predetermined operation state.

3. The apparatus of claim 1 , wherein the retrieval module further comprises a Platform Configuration Register (PCR) interface configured to obtain a value from a PCR, wherein the value was previously extended to the PCR by a computer program selected for authentication, and wherein the value unlocks the decryption key.

4. The apparatus of claim 1 , wherein the decryption module further comprises a virus scan module configured to perform a virus scan on the selected device, and wherein the decryption module decrypts the authentication signal in response to a determination that the device selected for authentication is virus free.

5. The apparatus of claim 1 , wherein the communication module further comprises at least one of:

an audio module configured to play an audio-based authentication signal to a user;

a video module configured to display a video-based authentication signal to a user; and

a Light Emitting Diode (LED) module configured to display an LED-based authentication signal to a user.

6. The apparatus of claim 3 , wherein the computer program selected for authentication is a virtualization program.

7. The apparatus of claim 3 , wherein the decryption module further comprises a comparison module configured to compare the value obtained by the PCR interface with a trusted value stored separately from the device selected for authentication, and wherein the decryption module decrypts the authentication signal in response to a determination that the value obtained by the PCR interface and the trusted key value.

8. A system comprising:

a device selected for authentication, the device comprising:

a Trusted Platform Module (TPM) configured to facilitate CRTM; and

a Platform Configuration Register (PCR) coupled to the TPM, and configured to store CRTM values; and

a removable authenticator, configured to:

retrieve a measurement value from a predetermined location on a device selected for authentication for unlocking a decryption key, a correct measurement value enabling unlocking of the decryption key;

decrypt an external authentication signal using the unlocked decryption key prior to executing a local boot block of the device, the authentication signal stored external to the device, the authentication signal comprising a message that once decrypted and presented to a user is recognizable by the user; and

communicate the decrypted authentication signal to a user as one or more of a visual and audible signal discernible by the user to determine that the authentication signal was correctly decrypted.

9. The system of claim 8 , wherein the removable authenticator is further configured to:

determine an operation state of the TPM; and

decrypt the authentication signal in response to a determination that the TPM is operating in a predetermined operation state.

10. The system of claim 8 , wherein the removable authenticator is further configured to obtain a value from the PCR, wherein the value was previously extended to the PCR by a computer program selected for authentication, and wherein the value unlocks the decryption key.

11. The system of claim 8 , wherein the removable authenticator is further configured to:

trigger a virus scan on the selected device; and

decrypt the authentication signal in response to a determination that the device selected for authentication is virus free.

12. The system of claim 8 , wherein the removable authenticator further comprises at least one of:

an audio controller configured to play an audio-based authentication signal to a user;

a video controller configured to display a video-based authentication signal to a user; and

a Light Emitting Diode (LED) controller configured to display an LED-based authentication signal to a user.

13. The system of claim 10 , wherein the computer program selected for authentication is a virtualization program.

14. The system of claim 10 , wherein the removable authenticator is further configured to:

compare the value obtained by the PCR interface with a trusted value stored separately from the device selected for authentication; and

decrypt the authentication signal in response to a determination that the value obtained by the PCR interface and the trusted value match.

15. A method comprising:

retrieving a measurement value from a predetermined location on a device selected for authentication for unlocking a decryption key, a correct measurement value enabling unlocking of the decryption key;

decrypting an external authentication signal using the unlocked decryption key prior to executing a local boot block of the device, the authentication signal stored external to the device, the authentication signal comprising a message that once decrypted and presented to a user is recognizable by the user; and

communicating the decrypted authentication signal to a user as one or more of a visual and audible signal discernible by the user to determine that the authentication signal was correctly decrypted.

16. The method of claim 15 , wherein the method further comprises:

determining an operation state of a TPM; and

decrypting the authentication signal in response to a determination that the TPM is operating in a predetermined operation state.

17. The method of claim 15 , wherein the method further comprises obtaining a value from a PCR, wherein the value was previously extended to the PCR by a computer program selected for authentication, and wherein the value unlocks the decryption key.

18. The method of claim 15 , wherein the method further comprises:

triggering a virus scan on the selected device; and

decrypting the authentication signal in response to a determination that the device selected for authentication is virus free.

19. The method of claim 15 , wherein the method further comprises at least one of:

playing an audio-based authentication signal to a user;

displaying a video-based authentication signal to a user; and

displaying a Light Emitting Diode (LED) based authentication signal to a user.

20. The method of claim 17 , wherein the method further comprises:

comparing the value obtained by the PCR interface with a trusted value stored separately from the device selected for authentication; and

decrypting the authentication signal in response to a determination that the value obtained by the PCR interface and the trusted value match.