Methods and apparatus for securing client-specified credentials at cryptographically-attested resources are described. An indication is obtained that resources deployed for execution of a compute instance of a multi-tenant computing service at an instance host of a provider network meet a client's security criteria. An encrypted representation of credentials to be used at the compute instance to implement operations on behalf of a client is received at the instance host. The credentials are extracted from the encrypted representation using a private key unique to the instance host, used for the operations, and then removed from the instance host without being saved in persistent memory.

Securing client-specified credentials at cryptographically attested resources

A compute instance of a virtual computing service (VCS) is assigned first and second cryptographically verifiable identities (CVIs) within respective namespaces. A cryptographic key pair associated with the first CVI includes a non-transferable private key managed by a secure key store which does not permit the private key to be copied. The VCS enables the instance to use the private key for asserting the CVIs. In response to a first identity query, the instance indicates the first CVI. In response to a second identity query, the instance indicates the second CVI.

Multi-faceted compute instance identity

A multi-tenant trusted platform module (MTTPM) is attached to a communication bus of a virtualization host. The MTTPM includes a plurality of per-guest-virtual-machine (per-GVM) memory location sets. In response to an indication of a first trusted computing request (TCR) associated with a first GVM of a plurality of GVMs instantiated at the virtualization host, a first memory location of a first per-GVM memory location set is accessed to generate a first response indicative of a configuration of the first GVM. In response to an indication of a second TCR associated with a second GVM, a second memory location of a second-per-GVM memory location set is accessed to generate a second response, wherein the second response is indicative of a different configuration of the second GVM.

Multi-tenant trusted platform modules

Disclosed is a method for provisioning an endorsement key (EK) certificate for a firmware trusted platform module (fTPM). In the method, the fTPM receives a derived key (DK) from a hardware trusted platform (HWTP). The fTPM is implemented in the HWTP, the DK is derived from a hardware key (HWK) securely stored in the HWTP, the HWK is unique to the HWTP, and the HWK is not available to the fTPM. The fTPM generates an endorsement primary seed (EPS) based on the DK, and generates a hashed endorsement primary seed (HEPS) based on a hash of the EPS. The fTPM forwards the HEPS to a provisioning station, and receives, from the provisioning station, an EK certificate corresponding to the HEPS.

Apparatus and method for provisioning an endorsement key certificate for a firmware trusted platform module

A technique for enabling a client to provide a server entity is disclosed. In method aspects, a first method is performed in the client and comprises the steps of providing the client with a secure trusted environment, the environment being trusted by the client and by at least one third party, and accommodating, in the secure trusted environment, at least a local portion of the server entity, the server entity being configured to handle one or more server requests from the client, and data required by the server entity so as to handle the server request. A second method is performed in a server and comprises the steps of providing, for the secure trusted environment of the client, the environment being trusted by the client and by the at least one third party the at least local portion of the server entity, and the data.

Technique for enabling a client to provide a server entity

A migration system (200) of virtual Trusted Platform Module (vTPM) instance from a source platform (107) network connectable to a destination platform (108) is provided, the system (200) includes a resource manager positionable on a migration source server, wherein the resource manager is network connectable to a source migration controller positionable on the source platform (107), a resource manager positionable on a migration destination server, wherein the resource manager is network connectable to a destination migration controller positionable on the destination platform (108), wherein a plurality of session keys are used for tracking of migration when a secure channel is established beforehand.

A migration system of virtual trusted platform module (vtpm) instance and methods of migrating thereof

The present invention provides a system (100) for issuing endorsement key (EK) certificate. The system comprises a trusted platform system (110) requesting for the EK certificate, the trusted platform system (1 10) having a virtual trusted platform module (vTPM) instance (122) and a local certification authority (CA) (124) managed under a hypervisor (1 12) of the trusted platform system (110); a third party privacy certification authority (PCA) (130) operationally connecting to the trusted platform system (110) through a secure channel (135), wherein the third party PCA (130) operationally issuing a CA certificate to valid local CA. Operationally, the local CA (124) requests a CA certificate from the third party PCA (130), and upon verified to be a valid local CA, the local CA signs and issues the EK certificate to the vTPM. A method of providing a trusted computing environment is also provided.

System and method for issuing endorsement key credential in trusted computing environment using local certificate authority

The present application teaches of a remote server that provides TPM functionalities to devices which do not have TPM functionalities.

System and method to provide trusted platform module (tpm) functionalities on a remote server for multiple users

Handle everyday research tasks with reliable, citation-backed results

Your personal Research Agent to handle research tasks with citation-backed results

Popular Tasks used by Researchers

How can I help with your research?

Meet SciSpace

Get more enhanced response by uploading the PDFs you want me to reference.

No relevant PDFs in your library

SciSpace is the AI research assistant for academics. Run systematic literature reviews on 280M+ papers, and write papers with cited sources. Trusted by 1M+ students, PhDs & researchers.

SciSpace | AI for Research

Analyze PDFs

Code & Manuscripts

Funding & Grants

Literature & Patents

Medical & Clinical Data

Systematic Review

Visualize & Present

Web & Data

Build a Google Scholar-like website for your research.

Build a website

Create charts and images for your research

Create a Chart

Write a paper for submission to a journal

Draft a manuscript

Patent Search

Design eye-catching scientific posters in minutes.

Scientific Poster Generation

Systematic Literature Review

One task is running at the moment. Your messages will be shown right after.

Drag and drop or click here to browse

Loved by <highlight>1 million+</highlight> researchers

Extract a list of specific topics and their sources from unstructured text

Topics

Compare and analyze relevant papers that matches with your search

Papers

Get insights from PDFs and bookmarked papers from your library

My library

Recent searches

Try searching for:

Catch AI-generated content in scholarly and non-scholarly content

{ai} Detector

Ai Writer

Get PDF Summaries, highlighted text explanations 

Chat with PDF

Effortlessly create in-text citations and bibliographies in APA and 2,500 other formats

Citation generator

Get explanations, summaries, and answers on academic papers

Ease up your research workflow with {scispace}'s cohort of exciting AI tools

Elevate your academic writing skills and convey your ideas the way you want

Paraphraser

Explore our range of reading and writing tools

Your file is being prepared and should be ready in a few minutes. If it's a large file, it might take a bit longer. You can close this window, and we'll email you the file when it's done.

You have reached a maximum limit of <strong>{limit}</strong> columns in the table. Remove at least <strong>1</strong> column to add or create another one.

Mohd Azuddin Parman

Author Tools

Chat about Author

Papers

A migration system of virtual trusted platform module (vtpm) instance and methods of migrating thereof

System and method for issuing endorsement key credential in trusted computing environment using local certificate authority

System and method to provide trusted platform module (tpm) functionalities on a remote server for multiple users