Key attestation from trusted execution environments

Authors:
Kari Kostiainen;Alexandra Dmitrienko;Jan-Erik Ekberg;Ahmad-Reza Sadeghi;N. Asokan
Affiliations:
Nokia Research Center, Helsinki, Finland;Horst Görtz Institute for IT Security, Ruhr-University Bochum, Germany;Nokia Research Center, Helsinki, Finland;Horst Görtz Institute for IT Security, Ruhr-University Bochum, Germany;Nokia Research Center, Helsinki, Finland
Venue:
TRUST'10 Proceedings of the 3rd international conference on Trust and trustworthy computing
Year:
2010

Citing 5
Cited 0

Personal Secure Booting

ACISP '01 Proceedings of the 6th Australasian Conference on Information Security and Privacy
Copilot - a coprocessor-based kernel runtime integrity monitor

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
The Trusted Execution Module: Commodity General-Purpose Trusted Computing

CARDIS '08 Proceedings of the 8th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
Measuring Semantic Integrity for Remote Attestation

Trust '09 Proceedings of the 2nd International Conference on Trusted Computing
On-board credentials with open provisioning

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Credential platforms implemented on top of Trusted Execution Environments (TrEEs) allow users to store and use their credentials, e.g., cryptographic keys or user passwords, securely. One important requirement for a TrEE-based credential platform is the ability to attest that a credential has been created and is kept within the TrEE. Credential properties, such as usage permissions, should be also attested. Existing attestation mechanisms are limited to attesting which applications outside the TrEE are authorized to use the credential. In this paper we describe a novel key attestation mechanism that allows attestation of both TrEE internal and external key usage permissions. We have implemented this attestation mechanism for mobile phones with M-Shield TrEE.