Secure Guest Attestation Through Trusted Execution Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In computing environments with virtualization, secure guests are hosted by hypervisors that may not be fully trustworthy, necessitating protection of their memory and CPU registers to maintain integrity and confidentiality, while allowing users to verify the authenticity of the secure guest.
Innovation Solution
A trusted execution environment computes integrity measurements using an attestation request structure protected by an attestation key, ensuring that the secure guest is started with the correct image and metadata, and verifies the integrity of the attestation request to maintain confidentiality and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional hypervisor has full control over hosted guests to enable inspection and modification of memory, then the hypervisor can perform security checks and resource management, but the integrity and confidentiality of secure guests cannot be maintained
Solution Approach 1:
The system segments the hypervisor functionality into a traditional hypervisor layer and a trusted execution environment (TEE) layer. The TEE is a separate, hardware-backed execution environment that handles security-critical operations, isolating them from the potentially untrusted main hypervisor. This segmentation allows the hypervisor to have full control for resource management while the TEE maintains integrity protection independently.
Solution Approach 2:
The trusted execution environment acts as an intermediary between the untrusted hypervisor and the secure guest. It receives requests from the hypervisor, validates them through integrity measurements, and only permits operations that maintain security policies. This intermediary layer enables the hypervisor to perform management functions while preventing malicious modifications to guest memory and state.
2Reliability
If integrity measurements are computed and provided to verify secure guest authenticity, then users can ensure the correct guest image is running, but the complexity of verification processing increases
Solution Approach 1:
The system performs integrity measurements and verification preparations in advance within the trusted execution environment. When a secure guest is loaded, the TEE computes integrity measurements of the guest image and stores them for later verification. This preliminary action eliminates the need for complex real-time verification processing, as the authentication data is pre-computed and cached.
Solution Approach 2:
The system creates a simplified verification interface that copies essential integrity information (such as hashes or digital signatures) from the complex internal verification process to an external format that can be easily transmitted and verified by users or client systems. This copying approach maintains verification reliability while reducing the complexity of the verification data structure and processing requirements.
3Object-affected harmful factors
If the attestation request structure is integrity protected and the attestation key is encrypted, then protection against modification and confidentiality are maintained, but the processing steps and security verification increase
Solution Approach 1:
The trusted execution environment performs self-service security operations by automatically verifying the integrity protection of the attestation request structure and decrypting the encrypted attestation key without requiring external intervention. The TEE uses its own hardware-enforced security mechanisms to validate cryptographic operations, eliminating the need for complex software-based verification and reducing overall processing complexity while maintaining strong security.
Data Source
AI summary
A trusted execution environment obtains an attestation request. The attestation request includes at least an attestation key. Based on obtaining the attestation request, one or more integrity measurements are computed, and the computing uses at least the attestation key. The one or more integrity measurements are provided to an entity, and the one or more integrity measurements are to be used to verify that a secure guest has been started using a selected secure guest image and selected secure guest metadata.