Trust model
Business requirements—for example,
to permit provisioning—dictate
the trust that must be established
between an agent and a server. Thus,
we isolate built-in trust to the chip
and server. The agents act as conduits
for chip–server communication,
and the appliances serve as communication
concentrators. But neither
appliances nor agents are trusted for
chip communication—the protocols
ensure the messages’ integrity and
authenticate the chip and server.