최소 전제조건 개념을 이용한 성질 기반 데이터 실링 = A Property-Based Data Sealing using the Weakest Precondition Concept

다국어 초록 (Multilingual Abstract)

Trusted Computing is a hardware-based technology that aims to guarantee security for machines beyond their users`control by providing security on computing hardware and software. TPM(Trusted Platform Module), the trusted platform specified by the Trusted Computing Group, acts as the roots for the trusted data storage and the trusted reporting of platform configuration. Data sealing encrypts secret data with a key and the platform`s configuration at the time of encryption. In contrast to the traditional data sealing based on binary hash values of the platform configuration, a new approach called property-based data sealing was recently suggested. In this paper, we propose and analyze a new property-based data sealing protocol using the weakest precondition concept by Dijkstra. The proposed protocol resolves the problem of system updates by allowing sealed data to be unsealed at any configuration providing the required property. It assumes practically implementable trusted third parties only and protects platform`s privacy when communicating. We demonstrate the proposed protocol`s operability with any TPM chip by implementing and running the protocol on a software TPM emulator by Strasser. The proposed scheme can be deployed in PDAs and smart phones over wireless mobile networks as well as desktop PCs.

참고문헌 (Reference)

1 R.L.Kay, "Trusted Computing is Real and it’s Here" Endpoint Technologies Associates 2007

2 "Trusted Computing Group, TPM Main Specification, Version 1.2"

3 "Trusted Computing Group, TCG Specification Architecture Overview, Revision 1.3"

4 "Trusted Computing Group, TCG Software Stack Specification, Version 1.1"

5 M. Strasser, "Software-based TPM Emulator for Linux" Department of Computer Science 2004

6 U. Kuhn, "Secure Data Management in Trusted Computing" 2005

7 A.-R. Sadeghi, "Property-based Attestation for Computing Platforms: Caring about properties, not mechanisms" ACM Press 2004

8 J. Poritz, "Property Attestation – Scalable and Privacy-friendly Security Assessment of Peer Computers" IBM Research 2004

9 "OpenSSL:The Open Source toolkit for SSL/TLS"

10 E.W. Dijkstra, "Guarded Commands, Nondeterminacy and Formal Derivation of Programs" 18 (18): 453-458, 1975

11 P. England, "A Trusted Open Platform" IEEE Computer 2003

12 L. Chen, "A Protocol for Property-based Attestation" 2006