Security Broker for TEE Service Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Consumer devices lack the ability to verify that services are executing in Trusted Execution Environments (TEEs) due to restricted access to low-level hardware information, which is essential for ensuring the integrity and confidentiality of services.
Innovation Solution
A broker device is introduced to acquire and store integrity data, enabling consumer devices to verify the execution of services in TEEs by interacting with the computing device's processors and providing integrity data, which includes hashes, cryptographic keys, and device information, using techniques like remote attestation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If consumer devices are given restricted access to service interfaces only, then security and trust are improved, but the ability to verify service integrity in TEEs is lost
Solution Approach 1:
A broker device is introduced as an intermediary between the consumer device and the service. The broker acquires integrity data from the service running in the TEE and makes this data available to the consumer device. This resolves the contradiction by enabling integrity verification without giving the consumer direct access to the service or low-level hardware information.
2Object-affected harmful factors
If cryptographic keys are made inaccessible to operating system processes, then data confidentiality is improved, but the ability to provide integrity data for verification is reduced
Solution Approach 1:
The broker device serves as a mediator that can access integrity data from the TEE environment where cryptographic keys are protected, and transmit this data to consumer devices. This allows integrity verification to proceed without compromising the confidentiality protections provided by inaccessible keys.
3Measurement precision
If consumer devices directly verify service integrity, then verification capability is improved, but computational resources and complexity are increased
Solution Approach 1:
The broker device handles the complex tasks of acquiring integrity data from services running in TEEs and making this data available to consumers. This shifts the complexity from the consumer device to the broker, allowing consumers to perform simple verification without the burden of complex TEE interaction mechanisms.
4Adaptability or versatility
If multiple TEE implementations are supported, then adaptability is improved, but device complexity and interface management are worsened
Solution Approach 1:
The broker device is designed with universal functionality to interact with multiple different TEE implementations (such as Intel SGX, AMD SEV, ARM TrustZone) through a unified interface. This allows the system to support various TEE types while managing the complexity centrally at the broker rather than at each consumer device.
Data Source
AI summary
The technology disclosed herein enables consumer devices to verify the integrity of services running in trusted execution environments. An example method may include: acquiring, by a broker device, integrity data of a first trusted execution environment of a first computing device and integrity data of a second trusted execution environment of a second computing device, wherein the first trusted execution environment executes a first service and the second trusted execution environment executes a second service; storing the integrity data of the first trusted execution environment and the integrity data of the second trusted execution environment in a data storage device as stored integrity data; correlating integrity data of the first trusted execution environment with the first service and the integrity data of the second trusted execution environment with the second service; and providing, by the broker device, the stored integrity data to a plurality of consumer devices.