Local Device Attestation for Trusted User Interface Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing remote attestation processes do not adequately ensure the trustworthiness of the presentation layer on a user device, making them vulnerable to compromise and spoofing attacks.
Innovation Solution
Implementing local device attestation using a trustable device such as a security dongle, secure enclave, or buddy device to verify the integrity of the user device, including its user interface, by generating attestation evidence with a random number, signing it, and validating the verifier's signature.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If remote attestation is used to verify device integrity, then trust establishment between devices is improved, but the presentation layer (user interface) remains vulnerable to compromise and spoofing attacks
Solution Approach 1:
The patent divides the attestation process into two distinct segments: remote attestation for verifying device integrity, and local attestation for verifying presentation layer integrity. This segmentation allows each type of attestation to address specific security concerns independently, with local attestation specifically targeting the user interface vulnerabilities that remote attestation cannot address.
Solution Approach 2:
The patent introduces a local attestation mechanism as an intermediary layer between the user interface and the user. This local attestation acts as a mediator that verifies the integrity of the presentation layer components, providing an additional trust verification step that prevents spoofing attacks without interfering with the existing remote attestation process.
2Loss of information
If the user device interface is compromised by an attacker, then information authenticity is improved through remote attestation, but the user cannot trust the displayed information
Solution Approach 1:
The patent implements preliminary verification of the presentation layer through local attestation before the user interacts with the interface. By performing this verification in advance, the system ensures that the user interface is trustworthy before any information is displayed or user input is accepted, preventing attackers from compromising the interface after remote attestation has occurred.
Solution Approach 2:
The patent establishes a feedback mechanism where local attestation results are used to determine whether the user interface should be trusted. This feedback loop continuously verifies presentation layer integrity and provides real-time trust verification, allowing the system to respond to potential compromises by invalidating the interface trust status.
3Ease of operation
If an attacker provides spoofing inputs on the user interface, then user interaction is maintained, but private data is maliciously obtained
Solution Approach 1:
The patent applies preliminary anti-action by implementing local attestation that proactively verifies the integrity of the user interface and input handling mechanisms before any user interaction occurs. This preventive measure counteracts potential spoofing attacks by ensuring that the interface and its input processing are trustworthy, thereby blocking malicious data extraction attempts before they can succeed.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of performing local device attestation is provided. The method includes receiving, by a trustable device, an instruction from a user to perform attestation of a user device, creating, by the trustable device, an attestation request comprising a random number whereby attestation evidence is generated and includes the random number, the attestation evidence is then signed, and the attestation evidence is communicated to a verifier to generate an attestation report of the attestation evidence, receiving, by the trustable device, the attestation result of the verifier, the attestation result including a signature of the verifier, and validating, by the trustable device, content of the user device by verifying the signature of the verifier in the attestation report.