Erzeugung elektronischer Signaturen mittels Trusted Platform Module

Isolated execution is a concept commonly used for increasing the security of a computer system. In the embedded world, ARM TrustZone technology enables this goal and is currently used on mobile devices for applications such as secure payment or biometric authentication. In this work, we investigate the security benefits achievable through the usage of ARM TrustZone on FPGA-SoCs. We first adapt Microsoft’s implementation of a firmware Trusted Platform Module (fTPM) running inside ARM TrustZone for the Zynq UltraScale+ platform. This adaptation consists in integrating hardware accelerators available on the device to fTPM’s implementation and to enhance fTPM with an entropy source derived from on-chip SRAM start-up patterns. With our approach, we transform a software implementation of a TPM into a hybrid hardware/software design that could address some of the security drawbacks of the original implementation while keeping its flexibility. To demonstrate the security gains obtained via the usage of ARM TrustZone and our hybrid-TPM on FPGA-SoCs, we propose a framework that combines them for enabling a secure remote bitstream loading. The approach consists in preventing the insecure usages of a bitstream reconfiguration interface that are made possible by the manufacturer and to integrate the interface inside a Trusted Execution Environment.

Download Full-text

Towards a Verified Reference Implementation of a Trusted Platform Module

Security Protocols XVII - Lecture Notes in Computer Science ◽

10.1007/978-3-642-36213-2_12 ◽

2013 ◽

pp. 82-86

Author(s):

Aybek Mukhamedov

Keyword(s):

Trusted Platform Module ◽

Reference Implementation ◽

Trusted Platform

Download Full-text

A Comprehensive Survey on Techniques Based on TPM for Ensuring the Confidentiality in Cloud Data Centers

Cloud Security ◽

10.4018/978-1-5225-8176-5.ch022 ◽

2019 ◽

pp. 446-458

Author(s):

Arun Fera M. ◽

M. Saravanapriya ◽

J. John Shiny

Keyword(s):

Cloud Computing ◽

Data Storage ◽

Research Work ◽

Computing Systems ◽

Trusted Platform Module ◽

Cloud Data ◽

Secure Storage ◽

Comprehensive Survey ◽

Cloud Data Centers ◽

Trusted Platform

Cloud computing is one of the most vital technology which becomes part and parcel of corporate life. It is considered to be one of the most emerging technology which serves for various applications. Generally these Cloud computing systems provide a various data storage services which highly reduces the complexity of users. we mainly focus on addressing in providing confidentiality to users' data. We are proposing one mechanism for addressing this issue. Since software level security has vulnerabilities in addressing the solution to our problem we are dealing with providing hardware level of security. We are focusing on Trusted Platform Module (TPM) which is a chip in computer that is used for secure storage that is mainly used to deal with authentication problem. TPM which when used provides a trustworthy environment to the users. A detailed survey on various existing TPM related security and its implementations is carried out in our research work.

Download Full-text

Mutual Access Authentication in Wireless Wearable Networks Based on Trusted Platform Module

Journal of Convergence Information Technology ◽

10.4156/jcit.vol7.issue7.19 ◽

2012 ◽

Vol 7 (7) ◽

pp. 148-156

Author(s):

Peng Xiao ◽

Jingsha He ◽

Yingfang Fu ◽

Ting Zhang

Keyword(s):

Trusted Platform Module ◽

Access Authentication ◽

Trusted Platform

Download Full-text

Cryptographic Keys Generating and Renewing System for IoT Network Nodes—A Concept

Sensors ◽

10.3390/s20175012 ◽

2020 ◽

Vol 20 (17) ◽

pp. 5012

Author(s):

Janusz Furtak

Keyword(s):

Data Exchange ◽

Security And Privacy ◽

Critical Element ◽

Certification Authority ◽

Trusted Platform Module ◽

Network Nodes ◽

Cryptographic Keys ◽

Iot Devices ◽

System Nodes ◽

Trusted Platform

Designers and users of the Internet of Things (IoT) are devoting more and more attention to the issues of security and privacy as well as the integration of data coming from various areas. A critical element of cooperation is building mutual trust and secure data exchange. Because IoT devices usually have small memory resources, limited computing power, and limited energy resources, it is often impossible to effectively use a well-known solution based on the Certification Authority. This article describes the concept of the system for a cryptographic Key Generating and Renewing system (KGR). The concept of the solution is based on the use of the hardware Trusted Platform Module (TPM) v2.0 to support the procedures of creating trust structures, generating keys, protecting stored data, and securing data exchange between system nodes. The main tasks of the system are the secure distribution of a new symmetric key and renewal of an expired key for data exchange parties. The KGR system is especially designed for clusters of the IoT nodes but can also be used by other systems. A service based on the Message Queuing Telemetry Transport (MQTT) protocol will be used to exchange data between nodes of the KGR system.

Download Full-text