Trusted Platform Module Enclave Attestation for Secure Device Launching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current device launching methods lack robust security measures, particularly in ensuring the integrity and trustworthiness of the launch process, especially when operating systems and other environments are compromised, and they rely heavily on specific hardware infrastructure like Intel SGX, limiting universality.
Innovation Solution
The method involves trusted launching a device using a Trusted Platform Module (TPM) to extend integrity measurements to a platform configuration register, initiating remote attestation of a preset enclave, and performing local attestation of subsequent enclaves, thereby creating a secure environment independent of Intel SGX infrastructure and ensuring the trustworthiness of the launch process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional device launching methods are used, then the launching process is simple, but security and integrity measurement are insufficient
Solution Approach 1:
The patent performs integrity measurements of the operating system and enclave code during the launching process before execution, extending measurements to PCR registers in advance. This preliminary measurement action ensures that security verification is completed before the system fully boots, preventing compromised code from executing while maintaining a structured launching process.
Solution Approach 2:
The patent introduces TPM (Trusted Platform Module) as an intermediary component that securely stores measurement values and provides remote attestation services. The TPM acts as a mediator between the launching system and remote servers, enabling secure verification without requiring direct trust between the OS and external systems, thus enhancing security while managing complexity.
2Reliability
If Intel SGX hardware infrastructure is used for attestation, then enclave security is improved, but device universality is reduced
Solution Approach 1:
The patent implements a universal attestation mechanism based on TPM that can work across different device types and operating systems. Instead of relying on Intel SGX-specific hardware, the solution uses standardized TPM interfaces and remote attestation protocols that are compatible with multiple platforms, enabling the same security mechanism to function on diverse devices including mobile phones, tablets, and PCs.
Solution Approach 2:
The patent creates a portable attestation framework that copies the essential security measurement and verification logic from Intel SGX implementations to a TPM-based architecture. By replicating the core attestation functionality in a hardware-agnostic manner using TPM's measurement and attestation capabilities, the solution achieves similar security outcomes without being tied to specific hardware infrastructure.
3Reliability
If remote attestation is performed for every enclave, then security verification is thorough, but system performance decreases
Solution Approach 1:
The patent performs integrity measurements of enclaves during the launching process before they are activated, extending measurement values to PCR registers in advance. This preliminary measurement allows the system to verify enclave integrity upfront, and subsequent enclave operations can reference these pre-computed measurements rather than performing full remote attestation each time, reducing performance overhead while maintaining thorough verification.
Solution Approach 2:
The patent implements a feedback mechanism where the TPM stores measurement results in PCR registers that can be efficiently queried and verified. Once an enclave's integrity is established through initial measurement and remote attestation, the system uses this feedback information for subsequent verification decisions, avoiding redundant full attestation processes and improving overall system performance while maintaining security.
Data Source
AI summary
Embodiments of the present disclosure disclose a method and apparatus for launching a device. An embodiment of the method comprises: trusted launching the device and extending a trusted launch measurement to a platform configuration register of the trusted platform module, wherein the trusted launch measurement is an integrity measurement of the trusted launching of the device; loading a preset enclave and extending an enclave measurement to the platform configuration register, wherein the enclave measurement is an integrity measurement of the preset enclave; initiating a remote attestation of the preset enclave to an authentication server based on the trusted platform module; in response to receiving remote attestation pass information sent from the authenticating server, detecting an operation of loading another enclave, wherein the another enclave is an enclave different from the preset enclave among enclaves of the device; in response to the operation of loading the another enclave being detected, performing local attestation of the another enclave based on the preset enclave. This embodiment implements remote attestation of an enclave in the device.