Automated Platform Root Key Update via Security Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The recovery process for a compromised platform root key (PRK) in computing systems is time-consuming and resource-intensive, involving manual intervention and significant network resources, which can take days or weeks to complete, compromising system security during this period.
Innovation Solution
An automated system for PRK replacement that detects security breaches and generates a new PRK using a key generation function, incorporating a salt and counter to ensure uniqueness, without relying on external distribution points, thereby maintaining system security and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual PRK replacement process is used, then system security can be restored, but recovery time is extended to days or weeks
Solution Approach 1:
The system performs preliminary actions by continuously monitoring for security attacks and preparing for key replacement before compromise occurs. The automated monitoring system detects attacks in real-time and triggers the key replacement process immediately, eliminating the delays associated with manual detection and response.
Solution Approach 2:
The system implements self-service by automatically detecting security attacks, generating new platform root keys, and updating security credentials without human intervention. The automated key management system performs the entire recovery process autonomously, reducing recovery time from days to minutes while maintaining security integrity.
2Loss of time
If automated key generation is implemented, then recovery time is reduced to seconds or minutes, but system complexity increases
Solution Approach 1:
The system merges multiple functions into a unified automated key management system that combines security attack detection, key generation, credential updating, and system configuration. By integrating these previously separate manual processes into a single automated workflow, the system reduces complexity while enabling rapid recovery.
Solution Approach 2:
The system introduces an intermediary automated key management service that mediates between security attack detection and key replacement execution. This intermediary layer handles the complex cryptographic operations and coordinate updates automatically, simplifying the overall system architecture while enabling rapid response to security incidents.
3Reliability
If external distribution points are eliminated, then system independence and security are improved, but key distribution becomes more challenging
Solution Approach 1:
The system implements self-service by generating platform root keys internally using hardware-based cryptographic modules within the computing system itself. This eliminates dependency on external key distribution infrastructure, improving system independence and security while simplifying the key distribution process through self-contained key generation capabilities.
Solution Approach 2:
The system extracts the key generation function from external distribution points and embeds it directly within the computing system's hardware security module. This extraction eliminates the need for external key management infrastructure and enables autonomous, secure key generation and distribution within the system boundaries.
Data Source
AI summary
Methods, apparatus, and computer programs are disclosed to update a platform root key based on security attack detection. In one embodiment, a method comprises: detecting an attack to a platform root key of a computing system, the platform root key stored in a region within a hardware module of the computing system and serving as a seed key of a plurality of cryptographic keys of the computing system; responsive to detecting the attack to the platform root key, generating an updated platform root key using a key generation function to replace the platform root key; and causing the updated platform root key to be utilized in one or more of application signing, verification, and attestation in the computing system.