TEE Platform Attestation via Protected Nonces

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing remote attestation mechanisms face challenges in efficiently verifying the integrity of a platform entity during runtime, as they require predicting software changes and are complex, dependent on software code structure, and often need remote attestation services.

Innovation Solution

A method involving mutual authentication between a trusted execution environment (TEE) of a verification entity and a platform entity, using protected secret data and nonces to attest the platform entity's integrity without relying on remote attestation services or golden measurements, reducing the number of CPU cycles and dependency on trusted third parties.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional remote attestation mechanisms are used to verify platform integrity during runtime, then the verification of platform entity integrity can be performed, but the process becomes complex and dependent on software code structure and requires prediction of software changes

Engineering Contradiction:

Improveplatform integrity verificationVSAvoidattestation process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the attestation process from dependency on software code structure and external remote attestation services. By using TEE-protected secret data and nonces that are independent of software measurements, the solution removes the complexity associated with predicting software changes and analyzing code structure during runtime attestation.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces TEE-protected secret data and nonces as intermediaries between the verifier and the platform entity. These intermediaries enable attestation without requiring direct analysis of software code or dependency on external attestation services, thereby simplifying the overall process while maintaining reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If remote attestation is performed during runtime with software change prediction, then platform integrity can be verified, but the attestation process becomes dependent on trusted third party services and golden measurements

Engineering Contradiction:

Improveplatform integrity verificationVSAvoiddependency on external services

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent enables the platform entity to perform self-attestation using TEE-protected secret data and nonces. The verification process relies on cryptographic proofs generated within the TEE itself, eliminating dependency on external attestation services and golden measurements stored elsewhere. This self-contained approach improves adaptability while maintaining verification reliability.

Inventive Principle:

Principle #25Self-service

3Reliability

If traditional attestation mechanisms are used, then platform integrity can be verified, but the number of CPU cycles required is high and performance impact is significant

Engineering Contradiction:

Improveplatform integrity verificationVSAvoidCPU cycle efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent replaces traditional mechanical attestation mechanisms (such as extensive software code analysis, measurement verification against golden values, and chain of trust validation) with cryptographic operations within the TEE. The use of protected secret data and nonces with straightforward verification reduces computational overhead significantly compared to traditional approaches, improving CPU cycle efficiency while maintaining verification reliability.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Reliability

If remote attestation services are used for platform verification, then integrity can be confirmed, but the system requires complex chain of trust and golden measurements management

Engineering Contradiction:

Improveplatform integrity verificationVSAvoidchain of trust complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the attestation mechanism from dependency on complex chains of trust and externally stored golden measurements. By using TEE-protected secret data that is bound to the platform entity's hardware, the solution simplifies the trust model to a straightforward cryptographic verification process, eliminating the need for managing complex trust relationships and external measurement databases.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS11818124B2Attestation of a platform entity

Publication Date: 2023.11.14 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

AI summary

A mechanism and method are provided for attesting a platform entity. The method is performed by a verification entity. The method may include performing mutual authentication between a TEE of the verification entity and a TEE of the platform entity. The method may include sending, towards the TEE of the platform entity, a first piece of protected secret data. The method may include sending, towards the TEE of the platform entity, at least one protected nonce. The method may include receiving, from the TEE of the platform entity, a protected concatenation of the secret data and the at least one nonce. The method may include attesting the platform entity by, in the TEE of the verification entity, verifying that the secret data and the at least one nonce received from the platform entity are identical to the sent secret data and at least one nonce.