Computer platforms and their methods of operation
View Patent ↗A computer platform ( 100 ) uses a tamper-proof component ( 120 ), or “trusted module”, of a computer platform in conjunction with software, preferably running within the tamper-proof component, that controls the uploading and usage of data on the platform as a generic dongle for that platform. Licensing checks can occur within a trusted environment (in other words, an environment which can be trusted to behave as the user expects); this can be enforced by integrity checking of the uploading and license-checking software. Metering records can be stored in the tamper-proof device and reported back to administrators as required. There can be an associated clearinghouse mechanism to enable registration and payment for data.
1. A computer platform having:
a trusted module which is resistant to internal tampering and which stores a third party's public key certificate;
memory storing license-related code comprising at least one of a secure executor for checking whether the platform or a user thereof is licensed to use particular data and for providing an interface for using date data for monitoring its usage, and a secure loader for checking whether the platform or a user thereof is licensed to install particular data and/or for checking for data integrity before installation; and
memory storing a hashed version of the license-related code signed with the third party's private key; and
means for integrity checking the license-related code with reference to the signed version and the public key certificate and preventing the license-related code from being loaded if the integrity check fails.
2. A computer platform as claimed in claim 1 , wherein the integrity checking is performed by:
reading and hashing the license-related code to produce a first hash;
reading and decrypting the signed version using the public key certificate to produce a second hash; and
comparing the first and second hashes.
3. A computer platform as claimed in claim 1 , wherein the license-related code also includes a library of interface subroutines which can be called in order to communicate with the trusted module.
4. A computer platform as claimed in claim 1 , wherein the license-relate code includes, for at least one group of data, a (or a respective) software executor which specifies the respective group of data and which is operable to act as an interface to that group of data.
5. A computer platform as claimed in claim 1 , wherein the memory storing the license-related code the means storing the hashed version of the license-related code are provided, at least in part, by the trusted module.
6. A computer platform as claimed in claim 1 , wherein the trusted module and an operating system of the platform have a dedicated communications path therebetween which is inaccessible to other parts of the computer platform.