Tree-formed Verification Data for Trusted Platforms

Details Tree-formed Verification Data for Trusted Platforms Tree-formed Verification Data for Trusted Platforms

2010-07-05

arxiv.org/abs/1007.0642v3

Computer Science

Cryptography and Security

11 pages, 2 figures, v3: Reference added

Scientific paper

The establishment of trust relationships to a trusted platform relies on the process of validation. Validation allows an external entity to build trust in the expected behaviour of the platform based on provided evidence of the platform's configuration. In a validation mechanism such as remote attestation, the trusted platform exhibits verification data created during a start up process. These data consist in hardware-protected values of platform configuration registers, containing nested measurement values, i.e., hash values, of all loaded or started components. The values are created in linear order by the secured extend operation. Fine-grained diagnosis of components by the validator, based on the linear order of verification data and associated measurement logs, is inefficient. We propose a method to create a tree-formed verification data, in which component measurement values represent leaves and protected registers represent roots. It is shown how this is possible using a limited number of hardware-protected registers and the standard extend operation. In this way, the security of verification data is maintained, while the stored measurement log is consistently organised as a tree. We exhibit the basic mechanism of validating a platform using tree-formed measurement logs and verification data.

Affiliated with

Also associated with

No associations

Rating

Tree-formed Verification Data for Trusted Platforms does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with Tree-formed Verification Data for Trusted Platforms, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Tree-formed Verification Data for Trusted Platforms will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFWR-SCP-O-594656