Security Co-processor Downgrade Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures for computing platforms are vulnerable to downgrade attacks, where hackers exploit known vulnerabilities in outdated firmware or software versions, compromising the security of cryptographic keys stored by trusted platform modules.
Innovation Solution
Implementing a security co-processor that ties the platform's state to the protection of information, using a platform state policy and version counter policy to deny access to cryptographic keys unless the platform is in a known good state and version, preventing unauthorized access and downgrade attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a trusted platform module stores cryptographic keys securely, then security protection is improved, but the system becomes vulnerable to downgrade attacks where hackers exploit outdated firmware versions
Solution Approach 1:
The patent applies preliminary action by measuring and recording the platform state (firmware versions, configuration) before cryptographic keys are stored or accessed. This creates a baseline security state that is verified before allowing key operations, preventing downgrade attacks by ensuring the platform hasn't been compromised or downgraded to a vulnerable state.
Solution Approach 2:
The patent implements feedback by continuously measuring the current platform state and comparing it against the recorded baseline state. This feedback mechanism detects any changes or downgrades in firmware versions, and the system responds by denying access to cryptographic keys when the platform state doesn't match the expected secure state.
2Reliability
If firmware and software are updated to fix vulnerabilities, then security is improved, but hackers can still access secured data by downgrading to vulnerable versions
Solution Approach 1:
The system performs preliminary measurement and recording of the authorized platform state (firmware versions, software configurations) before allowing cryptographic operations. This creates a whitelist of approved platform states that can access secured data, preventing downgrades to vulnerable versions while allowing legitimate updates.
Solution Approach 2:
The patent applies preliminary anti-action by proactively measuring and validating the platform state before cryptographic key access is granted. This prevents downgrade attacks by checking whether the current firmware version matches the authorized version recorded when security parameters were established, blocking access if the platform has been downgraded to a vulnerable state.
3Ease of operation
If the system allows access to cryptographic keys for authorized applications, then usability is improved, but unauthorized applications can also access keys if platform state verification is not enforced
Solution Approach 1:
The patent implements feedback by measuring the current platform state and comparing it against the authorized state before granting cryptographic key access. This feedback loop ensures that only applications running on an authorized platform state can access cryptographic keys, preventing unauthorized access while maintaining ease of operation for legitimate applications.
Solution Approach 2:
The system introduces an intermediary verification mechanism that stands between the application and the cryptographic keys. The trusted platform module measures the platform state and acts as a gatekeeper, only releasing cryptographic keys when the measured state matches the authorized state, thus securing authorization without complicating application access.
Data Source
AI summary
A method for secure data protection includes storing secured data, associated with a computer application, using a security co-processor. The secured data is associated with a platform state policy that indicates an expected platform state. The secured data is associated with a version counter policy that indicates an expected version counter. A platform state of a computing platform is stored in the security co-processor. A version counter of the platform state is stored in the security co-processor. A request for the secured data is received from the requester. The platform state is determined to be in a known good state based on the platform state policy, the version counter policy, the platform state, the expected platform state, the version counter, and the expected version counter. The secured data is provided for the requester based on the determination.