Trusted Platform Module Attestation Identity Key Data Source Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection systems fail to ensure that data received by a server system is actually from an authenticated client device, as authentication techniques do not verify the source of the data.
Innovation Solution
A system and method that utilize an attestation identity key (AIK) to sign a platform configuration register (PCR) value, a secure hash digest, to verify that the data stream originated from an authenticated client device, by using a Trusted Platform Module (TPM) to perform quote operations and provide a TPM quote to the server system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication techniques are used to identify the client device, then the client device identity is verified, but the data source authenticity is not ensured
Solution Approach 1:
The patent segments the authentication process into two distinct phases: device authentication (identity verification) and data authentication (source verification). This is achieved by creating separate key pairs - one for device identification and another for data stream signing. The segmentation allows each phase to be handled independently, ensuring data source authenticity without overwhelming system complexity.
Solution Approach 2:
The patent introduces an intermediary cryptographic mechanism (signature generation and verification) between the client device and server system. The client device signs the data stream with a private key, and the server system verifies the signature using the corresponding public key. This intermediary process provides mathematical proof of data source authenticity without requiring complex trust relationships.
2Reliability
If the AIK private key is used to sign the hash digest, then the data stream authenticity is verified, but the AIK private key may be exposed
Solution Approach 1:
The patent extracts the signing operation from the TPM's secure environment and performs it in the untrusted client device software. Only the resulting signature (not the private key) is transmitted to the server system. This extraction eliminates the risk of private key exposure while maintaining authentication reliability, as the signature itself is sufficient to prove data source authenticity.
Solution Approach 2:
The patent uses the AIK public key (a safe copy) for verification purposes instead of requiring the private key. The public key contains all necessary information to verify signatures but cannot be used to generate them or compromise security. This copying approach allows widespread distribution of verification credentials without exposing sensitive private key material.
Data Source
AI summary
One embodiment provides a client device. The client device includes a Trusted Platform Module (TPM). The TPM includes a secure controller to extend a secure hash digest with at least a portion of a data stream or a hash of the at least a portion of the data stream.Another embodiment provides a server system. The server system includes verifier logic. The verifier logic is to verify that an attestation identity key (AIK) public key associated with a received Trusted Platform Module (TPM) quote corresponds to an authenticated client device.