Method and device for data processing and communication system comprising such device
A method and a device for data processing are provided comprising a first instance comprising at least one local trusted unit (LTU) and a local trust manager (LTM), the method comprising the step: The local trust manager provides a policy related information to the at least one local trusted unit and/or to a second instance.
1. A method implemented by a first instance comprising a processor, at least one local trusted unit and a local trust manager, the method comprising:
receiving a request from a second instance, the request comprising a policy or a required level of trust;
translating a parameter of the at least one local trusted unit into a trust level for the at least one local trusted unit; and
providing, by the local trust manager, policy related information including the trust level, to the at least one local trusted unit and to the second instance from which the request was received.
2. The method according to claim 1 , wherein the local trust manager provides the policy related information in response to the request received from the second instance.
3. The method according to claim 1 , wherein the policy related information comprises at least one of the following:
a token;
an attribute;
a certificate;
a set of claims;
a time, in particular a time stamp;
a program to be run on the first instance;
parameters of a program to be run on the first instance.
4. The method according to claim 1 , wherein the at least one local trusted unit transmits the policy related information to the second instance or to a third instance.
5. The method according to claim 1 , wherein the local trust manager acts as a virtual trust provider (VTP).
6. The method according to claim 1 , wherein the local trust manager provides policy related information to a requesting instance.
7. The method according to claim 1 , wherein the local trust manager derives at least one trust certificate.
8. The method according to claim 7 , wherein the local trust manager assigns at least one trust certificate to the at least one local trusted unit.
9. The method according to claim 1 , wherein the local trust manager reports a trust level of at least one local trusted unit to a requesting instance.
10. The method according to claim 1 , wherein the local trust manager translates the parameter from the at least one local trusted unit into a token to be transmitted to a requesting instance.
11. The method according to claim 1 , wherein the local trust manager communicates online and/or offline with an external instance that provides the local trust manager with information related to at least one of the local trusted units.
12. The method according to claim 1 , wherein the local trust manager is enabled to manage a session context of the at least one local trusted unit.
13. The method according to claim 1 , wherein the local trust manager performs a watchdog functionality to monitor the at least one local trusted unit.
14. The method according to claim 1 , wherein the local trust manager applies external control issues to the at least one local trusted unit.
15. The method according to claim 1 , wherein the local trust manager performs a charging functionality.
16. The method according to claim 1 , wherein the at least one local trusted unit is protected against manipulation.
17. The method according to claim 1 , wherein the at least one local trusted unit builds a security and/or trust relation based on a process and/or a credential that is controlled by the local trust manager.
18. A device comprising a processor unit that is arranged such that the method according to claim 1 is executable on said processor.
19. A device, comprising:
a processor unit;
at least one local trusted unit; and
a local trust manager;
wherein the local trust manager is configured to
receive a request from a second instance, the request comprising a policy or a required level of trust;
translate a parameter of the at least one local trusted unit into a trust level for the at least one local trusted unit; and
provide policy related information including the trust level, to the at least one local trusted unit and to the second instance from which the request was received.
20. The device according to claim 19 , wherein said device is a communication device, wherein the communication device comprises at least one of:
a smart card;
a chip card;
a user equipment;
a user terminal;
a mobile phone;
a machine setup and left at a location by a user;
a mobile computer;
a personal digital assistant;
a computer connected to a wired or wireless network;
an IP telephone.
21. A communication system comprising the device according to claim 20 .