Smart NIC Host Attestation via Two-Phase TPM Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data centers face a security vulnerability when establishing communication channels with new hosts before attestation, as this can expose them to potential malware uploads or denial-of-service attacks, making it challenging to determine trustworthiness effectively.
Innovation Solution
Implementing a two-phase attestation process using a trust platform module (TPM) and a smart network interface controller (SNIC) that isolates the host from the data center network during both phases, with the first phase assessing the SNIC's trustworthiness and the second phase performing internal host attestation via the internal bus to prevent vulnerable communication channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a communication channel is established with a host before attestation, then the host can be connected to the network, but security vulnerability increases due to potential malware uploads or denial-of-service attacks
Solution Approach 1:
The system performs attestation actions before establishing the communication channel. The security authority verifies the host's trustworthiness through cryptographic proofs and measurements prior to allowing network access, preventing malware uploads and attacks before they can occur
Solution Approach 2:
The system applies counter-measures in advance by implementing a security authority that validates host integrity before connection. The attestation protocol prevents harmful actions by verifying trustworthiness criteria beforehand, blocking potentially malicious hosts from establishing vulnerable communication channels
2Speed
If a communication channel is established before attestation, then network connectivity is enabled, but trustworthiness verification becomes compromised
Solution Approach 1:
The attestation protocol executes verification measurements before the host gains network connectivity. The security authority collects cryptographic proofs and system measurements in advance, ensuring accurate trustworthiness determination is completed prior to enabling any network interactions that would compromise measurement integrity
3Object-affected harmful factors
If the host is isolated during attestation, then security is enhanced by preventing attacks, but communication channel establishment is delayed
Solution Approach 1:
The system performs all necessary attestation actions while the host remains isolated, completing trustworthiness verification before any network access is granted. This preliminary verification eliminates the need for delayed access, as the host is ready for immediate secure connection once attestation succeeds
Solution Approach 2:
The host provides self-attestation by presenting cryptographic proofs and system measurements to the security authority. This self-service approach accelerates the process by eliminating the need for manual security checks or iterative verification, reducing the time loss during isolation
Data Source
AI summary
This disclosure is directed to automated processes for attesting to trustworthiness of a host considered for connection to a data center network. The attestation process is performed in two attestation phases. In the first phase, attestation is performed on a smart network interface controller (“SNIC”) connected to an internal bus of the host using a first trusted platform module (“TPM”) of the SNIC. In the second phase, attestation is performed on the host by the SNIC using a second TPM connected to the internal bus of the host in response to a determination that the SNIC is trustworthy. The host is connected to the data center network in response to a determination by the SNIC that the host is trustworthy.