Specification and Standardization of a Java Trusted Computing API

  • Authors:
  • Ronald Toegl;Thomas Winkler;Mohammad Nauman;Theodore W. Hong

  • Affiliations:
  • Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Inffeldgasse 16a, A-8010 Graz, Austria;Pervasive Computing Group / Institute of Networked and Embedded Systems (NES), Klagenfurt University, Lakeside B02b, A-9020 Klagenfurt, Austria;Computer Science Research and Development Unit, Pakistan;University of Cambridge Computer Laboratory, William Gates Building, 15 J.J. Thomson Ave., Cambridge CB3 0FD, UK

  • Venue:
  • Software—Practice & Experience
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

The paradigm of Trusted Computing promises a new approach to improve the security of computer systems. The core functionality, based on a hardware component known as Trusted Platform Module, is integrated into commodity hardware. However, operating system integration and application software support remains limited at present. In particular, for Java, the most widely used platform-independent computing environment, there is currently no generally accepted Trusted Computing API. In this article, we describe the design of a high-level API for Trusted Computing. We report on the current state of the Trusted Computing Group's software architecture and on previous approaches targeting Java. We derive our requirements and design goals and describe a novel API design. We report on our transparent approach to standardization in the Java Community Process. The result of this effort is the API we propose in the Java Specification Request 321. In this work, we not only present the design of this new API but also discuss implementation and testing strategies. Copyright © 2011 John Wiley & Sons, Ltd.