Computer security system and method

摘要

A computer security system comprises a secure platform adapted to receive sensitive data from an agent. The secure platform is also adapted to cooperate with a trusted platform module (TPM) to encrypt the sensitive data via a TPM storage key associated with the agent.

主权项

1. A computer security system, comprising:
a processor; a trusted platform module (TPM) comprising a circuit electrically connected to the processor; a secure platform to receive sensitive data from an agent and to request the trusted platform module (TPM) to encrypt the sensitive data via a TPM storage key associated with the agent, where the TPM storage key is generated by the TPM based in part on an authentication data previously received from the agent; and the secure platform being further configured to control access to the encrypted sensitive data by, in response to a request to access: receiving agent identification data and the authentication data from the agent requesting access; retrieving, from a memory, the TPM storage key associated with the agent identification data; passing the authentication data and the TPM storage key to the TPM, the TPM responsive to receiving the authentication data and the TPM storage key verifying the authentication data using the TPM storage key; and if verified, decrypting the sensitive data by the TPM using the TPM storage key to allow access to the sensitive data.