VirtualMonotonicCountersandCount-LimitedObjectsUsing详解.pptVIP

Virtual Monotonic Counters and Count-Limited Objects Using a TPM without a Trusted OS Luis F. G. Sarmenta (lfgs@) Joint work with: Marten van Dijk (marten@), Charles W. O’Donnell, Jonathan Rhodes, and Srini Devadas MIT Computer Science and A.I. Laboratory (CSAIL) University of Waterloo December 13, 2006 * This work was funded by Quanta Corporation as part of the MIT-Quanta T-Party project. T-Party @ MIT Project sponsored by Quanta Computer of Taiwan one of world’s largest manufacturers of laptops, blade servers, etc. Goal: Develop “revolutionary” new technologies that will change the way computers will be designed and used in the future Main sub-projects Natural Human Interaction / Interfaces T-Net (“Flattening the Internet”) JustPlay (automatically connecting and configuring devices) Trusted Computing and Virtual Storage Our Project Our Project: Trusted Computing and Virtual Storage Goal: Computing power and storage from anywhere, everywhere, from any device computing power and storage is “out there in the ether” can possibly use other users’ machines or third-party servers user can be mobile and intermittently offline/online Challenges: Availability, Scalability, Privacy, Personal Freedom, and Security In particular, security and privacy, even when interacting with or using untrusted users’ machines (e.g., in a P2P system) Trusted Computing and TPMs Trusted Computing use trusted hardware to assure correct execution Trusted Platform Module (TPM) by Trusted Computing Group (consortium) Features Hardware-based Crypto Engine Secure storage for keys Attestation Identity Keys (AIKs) Storage Root Key (SRK) encrypts personal keys, which are stored in external storage Supports Trusted Boot together with secure BIOS and CPU, can attest to remote parties that a particular (trusted) OS is running can prevent certain data (e.g., keys or passwords) from being used or decrypted unless a particular trusted OS is running Note: TPM does not prevent you from booting co