The remote attestation design based on the identity and attribute certificates

Liang, Yuan; Guo, Kai-bin; Li, Jianping

doi:10.1109/iccwamtip.2014.7073419

Cited by 3 publications

(2 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To overcome the flaw in binary remote attestation, Chen and other scholars firstly proposed a property based attestation protocol, PBA protocol [19]. Later, PBA protocol was further studied, and more remote attestation methods based on properties were proposed [20][21][22][23][24]. So far, property based remote attestation solution has currently been viewed as being the most valuable and prosperous for remote attestation, which overcomes the problems in binary remote attestation such as complexity, privacy, misuse of proof, and other defects.…”

Section: A Scenario For Remote Attestation Based On the Reverse Integrity Verification Methodsmentioning

confidence: 99%

Research on Linux Trusted Boot Method Based on Reverse Integrity Verification

Huang

Hou

Dai

et al. 2016

Scientific Programming

View full text Add to dashboard Cite

Trusted computing aims to build a trusted computing environment for information systems with the help of secure hardware TPM, which has been proved to be an effective way against network security threats. However, the TPM chips are not yet widely deployed in most computing devices so far, thus limiting the applied scope of trusted computing technology. To solve the problem of lacking trusted hardware in existing computing platform, an alternative security hardware USBKey is introduced in this paper to simulate the basic functions of TPM and a new reverse USBKey-based integrity verification model is proposed to implement the reverse integrity verification of the operating system boot process, which can achieve the effect of trusted boot of the operating system in end systems without TPMs. A Linux operating system booting method based on reverse integrity verification is designed and implemented in this paper, with which the integrity of data and executable files in the operating system are verified and protected during the trusted boot process phase by phase. It implements the trusted boot of operation system without TPM and supports remote attestation of the platform. Enhanced by our method, the flexibility of the trusted computing technology is greatly improved and it is possible for trusted computing to be applied in large-scale computing environment.

show abstract

Section: A Scenario For Remote Attestation Based On the Reverse Integrity Verification Methodsmentioning

confidence: 99%

Research on Linux Trusted Boot Method Based on Reverse Integrity Verification

Huang

Hou

Dai

et al. 2016

Scientific Programming

View full text Add to dashboard Cite

show abstract

“…T.Syed et al [17] propose effective solutions for increasing scalability of mechanisms for remote attestation of device sets by using Big Data technology, including using multiprocessor systems [18], property based authentication mechanisms [19] and characteristics of these properties [20].…”

Section: Related Workmentioning

confidence: 99%

Enhancing technology of producing secure IoT devices on the base of remote attestation

Desnitsky

Kotenko

2020

MATEC Web Conf.

View full text Add to dashboard Cite

The goal of the work is to enhance the technological process for the production of components of integrated secure systems of the Internet of Things for solving problems of operational control and reaction in emergency situations. The most important requirement for such systems is the need to ensure the properties of reliability and security of software and hardware elements of the end devices, taking into account the specificity of such systems. To achieve the goal in the paper the mechanisms for protection of Android applications from the threats of integrity violation of the software and of critical data on the base of remote attestation principles are modeled. Analytical and experimental evaluations of the implemented protection components and the protocol of their interaction taking into account limitations on the computing and communication resources of the target device are performed.

show abstract