US 12,255,920 B2
Remote attestation transport layer security and split trust encryption
Keith Moyer, Kirkland, WA (US); Benjamin Seth Moore, Redmond, WA (US); Ari Medvinksy, Mountain View, CA (US); Kevin Yap, Bellevue, WA (US); Ivan Petrov, London (GB); Tiziano Santoro, London (GB); Ariel Joseph Feldman, Forest Hills, NY (US); and Marcel Catalin Rosu, Mount KIsco, NY (US)
Assigned to Google LLC, Mountain View, CA (US)
Filed by Google LLC, Mountain View, CA (US)
Filed on Jul. 14, 2023, as Appl. No. 18/352,373.
Application 18/352,373 is a division of application No. 17/305,958, filed on Jul. 19, 2021, granted, now 11,743,293.
Prior Publication US 2023/0362195 A1, Nov. 9, 2023
Int. Cl. H04L 29/06 (2006.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/166 (2013.01) [H04L 9/083 (2013.01); H04L 9/085 (2013.01); H04L 9/0861 (2013.01); H04L 9/0894 (2013.01); H04L 9/3236 (2013.01); H04L 63/0823 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method when executed by data processing hardware of a first computing device causes the data processing hardware to perform operations comprising:
establishing, using a cryptographic protocol, a communication session between the first computing device and a second computing device, the communication session comprising communications encrypted by an ephemeral session key;
receiving, via the communication session, from the second computing device, an attestation request requesting the first computing device provide an attestation report;
generating the attestation report based on the ephemeral session key;
sending, using the communication session, the attestation report to the second computing device;
sending, via the communication session, to the second computing device, a second attestation request requesting the second computing device to provide a second attestation report;
receiving, via the communication session, the second attestation report from the second computing device; and
authenticating the second attestation report using the ephemeral session key.