Local Device Attestation for Trusted User Interface Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing remote attestation processes do not adequately prove the integrity of the presentation layer on a user device, making users vulnerable to attacks that compromise the trustworthiness of the user interface.
Innovation Solution
Implementing local device attestation using a trustable device such as a security dongle, secure enclave, or buddy device to verify the integrity of the user device, including its presentation layer, by generating attestation evidence with a random number, signing it, and validating the verifier's signature.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If remote attestation is used to verify device integrity, then trust between devices is established, but the presentation layer integrity cannot be proven and users are vulnerable to interface attacks
Solution Approach 1:
The system segments the attestation process into distinct components: a trustable device for generating attestation requests and verifying results, a verifier for validating evidence, and the user device being attested. This segmentation allows the presentation layer verification to be isolated and proven separately from other device functions, resolving the contradiction by maintaining reliability while managing complexity through modular design
Solution Approach 2:
The patent introduces a trustable device as an intermediary between the user and the user device. This intermediary generates attestation requests, verifies the presentation layer integrity, and provides certified attestation reports to the user. The intermediary resolves the contradiction by acting as a trusted mediator that proves device integrity without requiring the user to directly manage the complex verification processes
2Loss of information
If the user interface presents attestation results, then users can see trust information, but attackers can compromise the interface and provide spoofing inputs to mislead users
Solution Approach 1:
The system performs preliminary verification of the presentation layer integrity through local device attestation before displaying any trust information to the user. The trustable device verifies the user interface integrity in advance and only presents attestation results after confirming the interface has not been compromised. This preliminary action resolves the contradiction by ensuring trust information accuracy while preventing interface attacks from misleading users
Solution Approach 2:
The patent implements preliminary anti-action by having the trustable device verify the integrity of the user interface and block potentially malicious displays before they reach the user. The system proactively detects and prevents spoofing inputs by validating the presentation layer, thus counteracting harmful factors before they can affect the user, resolving the contradiction between providing accurate trust information and preventing interface attacks
3Reliability
If local device attestation is implemented to verify presentation layer integrity, then user device trustworthiness is proven, but the attestation process becomes more complex
Solution Approach 1:
The patent extracts the complex verification logic into a separate trustable device that operates independently from the user device being attested. The trustable device handles generating attestation requests, verifying presentation layer integrity, and producing certified reports. This extraction resolves the contradiction by proving presentation layer trustworthiness while managing complexity through separation of verification functions from the user-facing device
Data Source
AI summary
A method of performing local device attestation is provided. The method includes receiving, by a trustable device, an instruction from a user to perform attestation of a user device, creating, by the trustable device, an attestation request comprising a random number whereby attestation evidence is generated and includes the random number, the attestation evidence is then signed, and the attestation evidence is communicated to a verifier to generate an attestation report of the attestation evidence, receiving, by the trustable device, the attestation result of the verifier, the attestation result including a signature of the verifier, and validating, by the trustable device, content of the user device by verifying the signature of the verifier in the attestation report.