Enclave Population via Local Attestation Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In trusted computing, securely populating a secure enclave with secret information is challenging when the source and target are offline or cannot communicate, as existing methods lack security and control over the number of populations.
Innovation Solution
A method using a local attestation server with a secure component that receives encrypted population information, performs remote attestation, and uses a trusted platform module to decrypt and re-encrypt the information for secure, one-time population of the enclave, ensuring only the enclave provider can access the secret information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If existing population methods are used when source and target are offline, then population can proceed without network dependency, but security and control over the number of populations is lost
Solution Approach 1:
The application vendor performs preliminary actions by encrypting the population information with the enclave's public key before offline transfer. The enclave provider later performs remote attestation to verify the enclave's integrity and then uses the stored encryption key to decrypt and populate the enclave, ensuring security even when offline.
Solution Approach 2:
The patent introduces an intermediary mechanism where the enclave provider acts as a trusted mediator between the application vendor and the enclave. The provider stores encrypted population information and controls the decryption process through remote attestation, enabling secure offline population while maintaining population control.
2Adaptability or versatility
If the enclave provider can access population information for population, then population flexibility is improved, but security of the secret information is compromised
Solution Approach 1:
The patent extracts the decryption capability from the enclave provider and places it within the trusted enclave itself through remote attestation. The provider only handles encrypted data and never possesses the decryption key, while the enclave verifies its own integrity and performs self-decryption, eliminating the security risk of provider access.
Solution Approach 2:
The enclave performs self-verification through remote attestation and self-decryption of the population information. The enclave provider only facilitates the process by storing encrypted data and initiating attestation, but the actual decryption and population are performed autonomously by the enclave itself, ensuring the provider never accesses the secret information.
3Reliability
If remote attestation and TPM decryption are implemented, then security and population control are improved, but system complexity increases
Solution Approach 1:
The patent leverages the universal TPM hardware component already present in modern systems to provide decryption functionality. The TPM serves multiple purposes including securing boot, platform integrity verification, and now enclave population decryption, reducing the need for additional dedicated security hardware while maintaining high security standards.
Data Source
Figure 1~2
Figure 3~4
AI summary
A method is disclosed of a secure component (SC) of a local attestation server (LAS) for populating an enclave associated with the LAS. The SC comprises stored encrypted population information previously received in a data packet and encrypted by an encryption key matching a private decryption key of a trusted platform module (TPM) associated with the LAS. The method comprises receiving a public part of a temporary asymmetric key from the enclave, establishing a secure session between the SC and the TPM, sending (to the TPM by using the secure session) the encrypted population information and the public part of the temporary asymmetric key, receiving (from the TPM by using the secure session) the population information decrypted by the private decryption key and re-encrypted by the public part of the temporary asymmetric key, and transmitting the re-encrypted population information to the enclave. An additional method is also disclosed for enabling the population of the enclave. The additional method comprises receiving control parameters of the LAS, comprising the encryption key matching the private decryption key of the TPM, encrypting population information based on the control parameters and using the encryption key, and sending a data packet comprising the encrypted population information to the SC. Corresponding apparatuses and computer program product are also disclosed.