What has the TCG done to preserve privacy?
TCG believes that privacy is a necessary element of a trusted system. The system owner has ultimate control and permissions over private information and must “opt-in” to utilize the TCG subsystem. Integrity metrics can be reported by the TCG subsystem but the specification will not restrict the choice and options of the owner preserving openness and the ability of the owner to choose. The TCG specifications support privacy principles in a number of ways: • The owner controls personalization. • The owner controls the trust relationship. • The system provides private object storage and digital signature capability. • Private personalization information is never exposed. • Owner keys are encrypted prior to transmission.It is also important to know what the solutions are not: • They are not global identifiers. • They are not personalized before user interaction. • They are not fixed functions-they can be disabled permanently. • They are not controlled by others (only the owner controls the
