Trusted Service Counter for TEE Restart Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Trusted Execution Environments (TEEs) are vulnerable to attacks that exploit side-channels, particularly those that involve restarting the environment to leak secrets, as existing detection methods fail to effectively monitor performance anomalies and detect stealthy attacks.
Innovation Solution
A trusted service is provided to TEEs that monitors and tracks the number of restarts and execution time, using a secure communication channel with authenticated messages and pseudo-random functions to determine the validity of counter increments, enabling the TEEs to assess their health status and respond to potential threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional performance monitoring methods are used to detect attacks on TEEs, then cache-misses and page-faults can be detected, but stealthy attacks that restart the environment cannot be effectively detected
Solution Approach 1:
The patent introduces a trusted service as an intermediary component that maintains a persistent counter across TEE restarts. This counter serves as a mediator between the TEE and the external monitoring system, allowing detection of restart-based attacks without relying on performance metrics that attackers can bypass. The trusted service validates counter increments and provides authenticated responses, creating a reliable detection mechanism that works even when traditional performance monitoring fails.
2Reliability
If a trusted service is introduced to monitor restarts and execution time, then stealthy attacks can be detected, but system complexity increases
Solution Approach 1:
The patent segments the detection system into distinct functional components: a trusted service that maintains and validates the restart counter, an authenticated communication channel for message exchange, and a pseudo-random function generator for security validation. This segmentation allows each component to perform its specific function reliably while keeping the overall system manageable and modular.
Solution Approach 2:
The trusted service performs preliminary actions by pre-establishing an authenticated communication channel and pre-generating pseudo-random values before actual attack detection begins. The counter is initialized and ready to track restarts from the outset, allowing immediate detection without requiring complex post-hoc analysis.
3Reliability
If authenticated messages with pseudo-random functions are used for secure communication, then security is enhanced, but communication overhead increases
Solution Approach 1:
The patent replaces complex cryptographic verification mechanisms with a simpler counter-based authentication system. Instead of using heavy cryptographic protocols for every message exchange, the system uses a trusted counter that increments with each valid interaction, providing security through the integrity and persistence of the counter value rather than through computationally intensive cryptographic operations.
Data Source
AI summary
A method for providing a trusted service to a trusted execution environment running on a remote host machine includes receiving a message from the trusted execution environment and incrementing a counter of the trusted service. A response message is sent to the trusted execution environment using a value of the incremented counter.