Method and system for hierarchical platform boot measurements in a trusted computing environment
View Patent ↗An architecture for a distributed data processing system comprises a system-level service processor along with one or more node-level service processors; each are uniquely associated with a node, and each is extended to comprise any components that are necessary for operating the nodes as trusted platforms, such as a TPM and a CRTM in accordance with the security model of the Trusted Computing Group. These node-level service processors then inter-operate with the system-level service processor, which also contains any components that are necessary for operating the system as a whole as a trusted platform. A TPM within the system-level service processor aggregates integrity metrics that are gathered by the node-level service processors, thereafter reporting integrity metrics as requested, e.g., to a hypervisor, thereby allowing a large distributed data processing system to be validated as a trusted computing environment while allowing its highly parallelized initialization process to proceed.
1. A computer program product on a computer readable storage medium for implementing a trusted computing environment within a distributed data processing system, wherein the distributed data processing system contains a system-level service processor and a plurality of nodes containing at least one computational processing unit, wherein each node is associated with at least one node-level service processor such that each node-level service processor is uniquely associated with one node, the computer program product comprising:
means for initializing a node by an associated node-level service processor commencing with a core root of trust for measurement (CRTM) within the node-level service processor;
means for obtaining an integrity measurement using the node-level service processor for the initialization of the node by collecting measurements for software loaded by the CRTM and for subsequently loaded software; and
means for storing the integrity measurement in a trusted platform module on the node-level service processor; and
means for transferring integrity measurements from the plurality of nodes to the system-level service processor.
2. The computer program product of claim 1 further comprising:
means for performing the means for initializing, the means for obtaining, and the means for storing relatively concurrently for the plurality of nodes.
3. The computer program product of claim 1 further comprising:
means for storing the integrity measurements from the plurality of nodes in a trusted platform module on the system-level service processor.
4. The computer program product of claim 3 further comprising:
means for generating an entry in a platform configuration register (PCR) and a log for the trusted platform module on the system-level service processor upon receipt of an integrity measurement from a node.
5. The computer program product of claim 1 further comprising:
means for reporting integrity measurements from the system-level service processor to a hypervisor.
6. The computer program product of claim 1 further comprising:
means for loading a hypervisor on the node during the initialization of the node such that the obtained integrity measurement includes the loading of the hypervisor on the node.
7. An apparatus for implementing a trusted computing environment within a distributed data processing system, wherein the distributed data processing system contains a system-level service processor and a plurality of nodes containing at least one computational processing unit, wherein each node is associated with at least one node-level service processor such that each node-level service processor is uniquely associated with one node, the apparatus comprising:
means for initializing a node by an associated node-level service processor commencing with a core root of trust for measurement (CRTM) within the node-level service processor;
means for obtaining an integrity measurement using the node-level service processor for the initialization of the node by collecting measurements for software loaded by the CRTM and for subsequently loaded software; and
means for storing the integrity measurement in a trusted platform module on the node-level service processor; and
means for transferring integrity measurements from the plurality of nodes to the system-level service processor.
8. The apparatus of claim 7 further comprising:
means for performing the means for initializing, the means for obtaining, and the means for storing relatively concurrently for the plurality of nodes.
9. The apparatus of claim 7 further comprising:
means for storing the integrity measurements from the plurality of nodes in a trusted platform module on the system-level service processor.
10. The apparatus of claim 9 further comprising:
means for generating an entry in a platform configuration register (PCR) and a log for the trusted platform module on the system-level service processor upon receipt of an integrity measurement from a node.
11. The apparatus of claim 7 further comprising:
means for reporting integrity measurements from the system-level service processor to a hypervisor.
12. The apparatus of claim 7 further comprising:
means for loading a hypervisor on the node during the initialization of the node such that the obtained integrity measurement includes the loading of the hypervisor on the node.