Information security system
View Patent ↗An information security system is disclosed having a considerably simplified access control infrastructure. The number of secrets in a computer system domain is reduced to a minimum, yet individual users may still be identified and access to applications may still be individually controlled. The trusted entity in each of a plurality of platforms ( 100, 200, 202, 203 ) of the computer system may store an identity secret of the platform ( 100, 200, 202, 203 ) and may be trusted to use that secret in conjunction with an information label only when the platform ( 100, 200, 202, 203 ) is running the correct software to provide and/or take part in a particular service associated with that information label.
1. A computing platform comprising:
a trusted entity implemented in a computer; and
storage that securely provides to the trusted entity both a label identifying a computing resource that the computing platform can provide, and integrity-metric reference values; wherein
the computing platform responds to a request received at the computing platform for the computing resource, by generating a digitally-signed positive response only following the trusted entity having made a determination that the computing platform is in a software state providing the requested computing resource, the trusted entity making said determination by matching measured integrity metric values of the computing platform with the integrity-metric reference values.
2. A computer system comprising the computing platform as claimed in claim 1 in which the label is published within the computer system to indicate the presence or potential presence of the computing resource at the computing platform.
3. A computer system comprising the computing platform as claimed in claim 1 , in which the predetermined software state includes one or both of a particular configuration of computing resources and software described directly or indirectly by the at least one label.
4. A computer system as claimed in claim 2 in which the label is signed using a secret known to the computing platform.
5. A computer system as claimed in claim 2 , in which the label is published and one form of the published label includes descriptive information and is signed by a trusted entity.
6. A computer system as claimed in claim 2 , in which the label is published and one form of the published label includes descriptive information about the corresponding software state of the computing platform and is signed by a trusted entity.
7. A computer system comprising the computing platform as claimed in claim 1 and a further entity implemented in the computer system, wherein the further entity upon receiving proof of possession of the label by the computing platform, cooperates with that computing platform for the purposes of using or providing the computing resource.
8. A computing platform as claimed in claim 1 , wherein said computing resource is a service.
9. A computing platform as claimed in claim 1 , wherein said computing resource is a computing engine.
10. A computing platform as claimed in claim 1 , wherein said digitally-signed positive response takes the form of response data signed by the trusted entity using a secret known only to the trusted entity, the response data comprising said label.
11. A computing platform as claimed in claim 10 , wherein the request includes a nonce and the computing platform extracts the nonce from the request and includes the nonce in the response data.
12. A computer system comprising a plurality of computing platforms as claimed in claim 11 , in which the labels in at least two of the computing platforms are the same where the labels describe the same computing resource, which the at least two of the computing platforms can provide.
13. A computer system as claimed in claim 12 , in which the labels in the at least two computing platforms are the same, and indicate a software state related to the same distributed computing engine or distributed service.
14. The computing platform of claim 1 , wherein the trusted entity comprises a trusted component that is a hardware component of the computer.
15. The computing platform of claim 1 , wherein the software state corresponds to an environment providing secure use of the resource by a user that sent the request to the computing platform.
16. A method for indicating the presence of a computing resource at a computing platform implemented in a computer that includes a trusted entity; the method comprising:
securely storing for use by the trusted entity both a label identifying a computing resource that the computing platform can provide, and integrity-metric reference values;
in response to the trusted entity having made a determination that the computing platform is in a software state providing the requested resource, the computing platform responding to a request received at the computing platform for the computing resource, by generating in the computer a digitally-signed positive response; and
the trusted entity making said determination by matching measured integrity metric values of the computing platform with the integrity-metric reference values.
17. A method as claimed in claim 16 , further comprising making availability of the computing resource at the computing platform known by publishing both:
the label digitally signed by the computing platform, and
data digitally signed by a trusted entity and comprising the label and a description of the computing source.
18. A method as claimed in claim 16 , wherein said digitally-signed positive response takes the form of response data signed by the trusted entity using a secret known only to the trusted entity, the response data comprising said label.
19. A method as claimed in claim 18 , wherein the request includes a nonce and the computing platform extracts the nonce from the request and includes the nonce in the response data.