Machine Management System with Trusted Platform Module Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for detecting unauthorized modification of software and managing device-encryption keys face challenges, including failure to detect modifications when both software and hash values are altered, and the risk of security breaches due to key management complexities.
Innovation Solution
A system and method that involves a machine management system with a security device holding an unextractable secret key and an extractable public key, where machine and software identification information are stored externally, and a device-encryption key is created and managed to encrypt data, with the key being stored both internally and externally for secure access and detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hash values are stored on secondary storage device for detection, then unauthorized modification can be detected, but if both software and hash value are modified, detection fails
Solution Approach 1:
The patent introduces a trusted platform module (TPM) as an intermediary security device that securely stores the encryption key and performs encryption operations. The TPM acts as a mediator between the software integrity verification process and the encrypted hash values, ensuring that even if software is compromised, the encryption key remains protected within the TPM to enable detection of modifications.
2Reliability
If encryption key is stored on secondary storage device, then hash value can be encrypted, but unauthorized user can obtain decryption key
Solution Approach 1:
The patent extracts the encryption key from the secondary storage device and places it within the trusted platform module (TPM). This separation removes the key from vulnerable storage locations and confines it to a secure environment where it cannot be easily extracted or stolen by unauthorized users, while still enabling encryption of hash values.
3Reliability
If TPM is used for firmware detection, then unauthorized modification can be detected, but if software for determining comparison result is modified, detection fails
Solution Approach 1:
The patent segments the security verification process into distinct components: the TPM module that performs cryptographic operations and stores the encryption key, and the separate software that performs hash comparison. The TPM's independent security boundary ensures that even if the comparison software is compromised, the core encryption key and cryptographic functions remain protected within the TPM.
4Reliability
If device-encryption key is stored internally, then data can be encrypted, but if security device malfunctions, key cannot be decrypted
Solution Approach 1:
The patent changes the state of the encryption key from being exclusively stored in the security device to having a backup copy stored in external storage. This parameter change in key storage location enables recovery mechanisms where the external backup can be used to restore access to encrypted data if the security device malfunctions or is replaced.
Data Source
AI summary
A machine management method includes installing software in a machine including a security device that holds a secret key unextractable from the security device and a public key extractable from the security device, encrypts input data with the public key, and decrypts the input data with the secret key; storing machine identification information of the machine in association with software identification information of the software installed in the machine in an external management apparatus; creating a device-encryption key to encrypt data stored on a first storage device of the machine; storing a device-encryption-key BLOB obtained by encrypting the device-encryption key with the public key on a second storage device of the machine; and storing the device-encryption key in association with the machine identification information in the external management apparatus.