SIM-Based Remote Attestation Without CA Certificate Dependency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The reliability of remote attestation verification processes is compromised when a Certificate Authority (CA) server is unreliable, leading to vulnerabilities in digital certificates and increased network management complexity.
Innovation Solution
A remote attestation method using a symmetric key of a Subscriber Identity Module (SIM) to verify remote attestation reports, eliminating the dependency on CA servers and simplifying network management by leveraging SIM identity management mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a CA server is used to issue digital certificates for remote attestation, then the verification process can be implemented, but the reliability of verification is compromised when the CA server is unreliable
Solution Approach 1:
The patent extracts the dependency on the CA server from the remote attestation verification process. By using the SIM card's built-in cryptographic functions and keys, the system eliminates the need for external CA server infrastructure, thereby improving reliability when the CA server is unavailable or untrustworthy.
Solution Approach 2:
The SIM card performs self-verification of remote attestation reports using its own embedded cryptographic functions. The symmetric key stored in the SIM card enables the device to independently verify attestation reports without requiring external certification authority services, making the system self-sufficient.
2Reliability
If a CA server is deployed for certificate management, then digital certificate verification is enabled, but network management complexity increases
Solution Approach 1:
The patent removes the CA server infrastructure from the network management architecture. By leveraging the SIM card's inherent cryptographic capabilities, the system eliminates the need for complex certificate issuance, management, and validation infrastructure, thereby simplifying network management.
Solution Approach 2:
The SIM card's cryptographic functions serve multiple purposes: they provide identity authentication, secure key management, and remote attestation verification. This multi-functionality eliminates the need for separate CA server systems, reducing overall system complexity.
3Reliability
If digital certificates from CA server are used, then remote attestation can be verified, but the process becomes vulnerable to CA server attacks or vulnerabilities
Solution Approach 1:
The patent introduces the SIM card's symmetric key as an intermediary that enables direct verification between the device and the attestation report. This intermediary approach bypasses the vulnerable CA server infrastructure, providing a secure verification path that is not susceptible to CA server attacks.
Solution Approach 2:
The device uses its own SIM card's cryptographic functions to verify attestation reports independently, eliminating dependence on external CA server security. This self-service approach ensures that even if the CA server is compromised, the device's ability to verify attestation reports remains intact.
Data Source
AI summary
This disclosure provides a remote attestation method and a related device, to verify a remote attestation report by using a symmetric key of a subscriber identity module (SIM), without depending on a digital certificate provided by a certificate authority (CA) server. This can improve reliability of a remote attestation report verification process. In the method, a first apparatus receives request information, where the request information is for requesting a remote attestation report, and the remote attestation report is for remote attestation of the first apparatus. The first apparatus sends first information based on the request information, where the first information includes the remote attestation report and verification information, the verification information is for verifying the remote attestation report, and the verification information is obtained by processing the remote attestation report based on a symmetric key of a SIM in the first apparatus.