Abstract: A method and apparatus for ensuring system boot image integrity and authenticity is described. In one embodiment, the invention provides security from the end of Basic Input/Output System (BIOS) initialization to the point in time at which control is transferred to a high-level operating system (OS). The OS boot image is obtained via a network connection and is checked for integrity and authority to run on a particular platform. For this purpose, the invention provides a boot image security usage model that is simple and flexible enough to cover a variety of needs. Because receipt of boot images via a network connection can be subject to size constraints, the invention allows software to bootstrap more sophisticated security software if desired. In general, the invention utilizes one or more Remote-Boot Authorization Certificates for each group of platforms to be managed.

Abstract: A method for authenticating ownership of cryptographic keys for use in secured digital communication includes creating a key pair. The public key of the key pair is hashed to create a hashed public key. A prover's business card is presented to a verifier with the hashed public key physically imprinted upon the business card. The business card is accepted by the verifier who simultaneously observes the physical characteristics of the prover. Distinguishing characteristics of the prover are associated with the hashed public key. The public key corresponding to the hashed public key is obtained.