Sealing Cryptographic Keys to Trusted Platform Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer security systems are vulnerable to data breaches and unauthorized access, especially in mobile devices, as cryptographic keys can be compromised or stolen, leading to potential data theft and loss of security.
Innovation Solution
A method and system for sealing cryptographic keys to a trusted platform configuration using measurement values representing platform resources, such as embedded firmware and BIOS, ensuring that data can only be accessed if the platform is in its original configuration, with optional password or biometric confirmation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cryptographic keys are stored on mobile devices, then data accessibility is improved, but security is worsened due to vulnerability to theft and unauthorized access
Solution Approach 1:
The patent extracts the cryptographic key from the mobile device by sealing it to the platform configuration, effectively removing the key from direct access while maintaining data accessibility through the sealed mechanism. The key is taken out of the vulnerable storage location and bound to the platform's trusted configuration.
Solution Approach 2:
The patent introduces a sealed key as an intermediary between the cryptographic key and the data repository. The sealed key acts as a mediator that can only be unsealed when the platform configuration matches the original sealing configuration, providing a secure layer between the key and potential threats.
2Reliability
If cryptographic keys are protected by encryption, then security is improved, but key management complexity increases
Solution Approach 1:
The patent implements self-service key management through the sealing mechanism, where the system automatically binds the cryptographic key to the platform configuration without requiring manual intervention. The sealed key autonomously prevents unauthorized access based on platform state, eliminating the need for complex manual key management procedures.
Solution Approach 2:
The patent performs preliminary action by sealing the cryptographic key to the platform configuration before any potential security threats can occur. This advance binding ensures that the key is already protected and can only be accessed under the specific trusted configuration, eliminating the need for complex runtime key management decisions.
3Reliability
If data repositories are encrypted, then security is improved, but data access speed is reduced due to decryption overhead
Solution Approach 1:
The patent performs preliminary decryption by unsealing the cryptographic key during the platform initialization process before data access operations begin. This advance key preparation eliminates decryption overhead during actual data access, maintaining both security and speed.
Solution Approach 2:
The patent maintains continuous access to the cryptographic key once unsealed, allowing multiple data access operations to proceed without repeated decryption overhead. The sealed key remains available in the trusted platform environment, enabling continuous fast access to encrypted data while maintaining security through the sealed mechanism.
Data Source
AI summary
An apparatus, method, and system to seal a data repository to a trusted computing platform is described. The data repository may be sealed by encrypting the data on the repository and sealing a cryptographic key to a specific set of platform resources. With the data repository sealed to the platform, the system boot sequence will fail if the system configuration is compromised, for example by insertion of “snoopware” or a modified BIOS. Additionally, if the computer containing the data repository is lost or stolen, the encrypted data remains secure even if the repository is attached to a system modified to bypass normal safeguards.