Presence attestation: The missing link in dynamic trust bootstrapping

Presence attestation: The missing link in dynamic trust bootstrapping

Many popular modern processors include an important hardware security feature in the form of a DRTM (Dynamic Root of Trust for Measurement) that helps bootstrap trust and resists software attacks. However, despite substantial body of prior research on trust establishment, security of DRTM was treate...

Full description

Saved in:
Bibliographic Details
Main Authors: ZHANG, Zhangkai, DING, Xuhua, TSUDIK, Gene, CUI, Jinhua, LI, Zhoujun
Format: text
Language:English
Published: Institutional Knowledge at Singapore Management University 2017
Subjects:
trusted computing
attestation
dynamic root of trust
human-inthe-loop
device I/O
Information Security
Online Access:https://ink.library.smu.edu.sg/sis_research/3877
https://ink.library.smu.edu.sg/context/sis_research/article/4879/viewcontent/preatt.pdf
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Singapore Management University
Language: English
Description
Summary:Many popular modern processors include an important hardware security feature in the form of a DRTM (Dynamic Root of Trust for Measurement) that helps bootstrap trust and resists software attacks. However, despite substantial body of prior research on trust establishment, security of DRTM was treated without involvement of the human user, who represents a vital missing link. The basic challenge is: how can a human user determine whether an expected DRTM is currently active on her device? In this paper, we define the notion of “presence attestation”, which is based on mandatory, though minimal, user participation. We present three concrete presence attestation schemes: sightbased, location-based and scene-based. They vary in terms of security and usability features, and are suitable for different application contexts. After analyzing their security, we assess their usability and performance based on prototype implementations.

Similar Items