Offline Platform Health Verification via Out-of-Band Attestation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing attestation processes in computing devices are complex and prone to security issues due to human interaction, particularly in public or unattended devices, leading to potential credential compromise and loss of the first authentication factor.
Innovation Solution
A system and technique for platform health verification that enables users to assess the security status of a computing device offline using a health appraisal device, which compares attestation measurements with expected values through an out-of-band communication channel, ensuring secure interaction by indicating the device's health status visually, audibly, or tactiley.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing attestation protocols are used with human interaction, then mathematical proof validation can be performed, but security issues arise due to human error in public or unattended devices
Solution Approach 1:
The system enables the computing device to perform self-attestation by automatically generating and verifying cryptographic proofs without requiring human intervention. The device independently validates its own security state through automated comparison of attestation measurements against expected values, eliminating the need for human operators to perform complex mathematical validations.
Solution Approach 2:
The patent replaces manual human operations with automated electronic verification processes. Instead of humans performing mathematical proof validation, the system uses automated cryptographic verification mechanisms that compare attestation measurements programmatically, substituting mechanical human action with electronic automation.
2Reliability
If complex mathematical operations are performed for attestation, then security validation is achieved, but human operators are poorly suited to conduct these operations
Solution Approach 1:
The computing device automatically performs the complex mathematical operations required for attestation verification without human intervention. The system self-validates its security state by autonomously executing cryptographic computations and comparing results, eliminating the need for human operators to engage with complex mathematical processes.
Solution Approach 2:
The patent introduces an automated verification intermediary that handles complex mathematical operations between the computing device and the verifier. This intermediary systematically manages the cryptographic proof validation process, shielding human operators from direct engagement with complex mathematical computations while maintaining verification accuracy.
3Reliability
If traditional attestation protocols are used, then security validation can be performed, but reliance on third-party infrastructure is required
Solution Approach 1:
The system performs preliminary attestation measurements and generates cryptographic proofs locally on the computing device before requiring external verification. By pre-computing and storing attestation evidence on-device, the system enables offline security validation without requiring real-time connection to third-party infrastructure, enhancing adaptability to isolated environments.
Solution Approach 2:
The patent divides the attestation process into independent segments that can operate autonomously. The computing device independently performs self-attestation measurements and generates verification proofs without requiring continuous external infrastructure support, segmenting the validation process into self-contained operations that maintain security without third-party dependency.
Data Source
AI summary
A method comprises issuing a challenge to a target computing device, receiving, from the target computing device, a response to the challenge, the response comprising a self-attestation proof, a root of trust (RoT) certificate, and a set of current attestation measurements, and generating a signal indicative of a security status of the target based upon a determination of whether the set of current attestation measurements match a set of expected attestation measurements for the target computing device.