Trusted Application Startup with Local Attestation Chain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for protecting code/data of a program on a computing platform suffer from vulnerabilities such as protection weaknesses and dependence on remote attestation services, failing to effectively defend against dynamic attacks and side-channel attacks.
Innovation Solution
A method and apparatus that utilize a verifiable startup chip and trusted execution environment to isolate and execute user application logic, performing local attestation to generate attestation information, which is recorded and used to establish trust channels, eliminating reliance on external attestation services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If remote attestation service is used to verify platform security, then security verification capability is improved, but dependence on external services increases and protection vulnerability occurs
Solution Approach 1:
The patent introduces a verifiable startup chip as an intermediary component that locally stores measurement results and generates attestation information. This chip acts as a mediator between the trusted execution environment and the external remote user, enabling security verification without direct dependence on external attestation services. The startup chip records measurement results of each startup item and provides local attestation capability, reducing vulnerability to external service failures or attacks.
Solution Approach 2:
The system implements self-service attestation by enabling the target platform to generate and provide its own attestation information locally through the verifiable startup chip. The startup chip autonomously stores measurement results and generates first records that can be provided to remote users without requiring external attestation services. This self-contained approach eliminates dependence on external services while maintaining security verification capability.
2Device complexity
If traditional protection methods are used for code/data, then implementation simplicity is maintained, but protection vulnerability and security against dynamic attacks deteriorates
Solution Approach 1:
The patent segments the protection system into distinct functional components: a verifiable startup chip for storing measurement results, a trusted execution environment for generating attestation information, and a systematic startup process with multiple startup items. Each component has a specific security function, creating a layered protection architecture that is more robust against attacks while maintaining clear implementation boundaries. The segmentation allows each component to be optimized for its specific security role.
Solution Approach 2:
The system performs preliminary security actions by measuring each startup item before execution and storing the measurement results in the verifiable startup chip during the startup phase. This preliminary measurement and recording of integrity information occurs before any user applications run, establishing a trusted baseline for subsequent security verification. The attestation information is prepared in advance, enabling efficient and secure verification without compromising system performance.
3Measurement precision
If measurement of each startup item is performed and recorded, then security verification precision is improved, but system startup complexity increases
Solution Approach 1:
The verifiable startup chip serves multiple functions: it stores measurement results of all startup items, generates attestation information, and provides local verification capability. This multi-functional component consolidates what would otherwise be separate security mechanisms into a single unified device, reducing overall system complexity while maintaining high measurement precision for each startup item.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
Embodiments of this specification provide a method and an apparatus for starting an application on a target platform, where the target platform includes at least a verifiable startup chip and a trusted execution environment, and the method includes: sequentially starting a plurality of system startup items based on a predetermined startup order, where starting a first startup item included in the plurality of system startup items includes: measuring a next startup item of the first startup item, and recording a measurement result into the verifiable startup chip; starting an attestation proxy program based on the trusted execution environment; and starting a first user application based on the trusted execution environment, and determining, by the attestation proxy program, first attestation information corresponding to the first user application based on local attestation in the trusted execution environment.