检索结果-内蒙古大学图书馆

6th IFIP International Conference on New Technologies, Mobility and Security (NTMS)

作者： Akram, Raja Naeem Markantonakis, Konstantinos Mayes, Keith Univ Waikato Dept Comp Sci Hamilton New Zealand Univ London Smart Card Ctr Informat Secur Grp Egham Surrey England

ISBN: (纸本)9781479932238

Near Field Communication (NFC)-based mobile phone services offer a lifeline to the under-appreciated multi-application smart card initiative. The initiative could effectively replace heavy wallets full of smart cards for mundane tasks. However, the issue of the deployment model still lingers on. Possible approaches include, but are not restricted to, the User Centric Smart card Ownership Model (UCOM), Globalplatform Consumer Centric Model, and trusted Service Manager (TSM). In addition, multiapplication smart card architecture can be a Globalplatform trusted Execution Environment (TEE) and/or User Centric Tamper-Resistant Device (UCTD), which provide cross-device security and privacy preservation platforms to their users. In the multiapplication smart card environment, there might not be a prior off-card trusted relationship between a smart card and an application provider. Therefore, as a possible solution to overcome the absence of prior trusted relationships, this paper proposes the concept of trusted platform module (TPM) for smart cards (embedded devices) that can act as a point of reference for establishing the necessary trust between the device and an application provider, and among applications.

关键词： Smart Card Near Field Communication trusted Execution Environment Globalplatform Consumer Centric Model trusted platform module User Centric Smart Cards

来源：评论

学校读者我要写书评

暂无评论

xTSeH: A trusted platform module Sharing Scheme Towards Smart IoT-eHealth Devices

引用

IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS 2021年第2期39卷 370-383页

作者： Lu, Di Han, Ruidong Shen, Yulong Dong, Xuewen Ma, Jianfeng Du, Xiaojiang Guizani, Mohsen Xidian Univ Sch Comp Sci & Technol Xian 710071 Peoples R China Henan Univ Technol Minist Educ Key Lab Grain Informat Proc & Control Zhengzhou 450001 Peoples R China Xidian Univ Sch Network Engn Xian 710071 Peoples R China Temple Univ Dept Comp & Informat Sci Philadelphia PA 19122 USA Qatar Univ Dept Comp Sci & Engn Doha Qatar

IoT based eHealth system brings a revolution to healthcare industry, with which the old healthcare systems can be updated into smarter and more personalized ones. The practitioners can continue monitoring the physical status of the patients at anytime and anywhere, and develop more precise treatment plans by analyzing the collected data, such as heart rate, blood pressure, blood glucose. Actually, these smart sensors used in eHealth system are smart embedded devices (SED). Due to the limitations on hardware capabilities, these inter-connected SEDs lack of security considerations in design and implementation, and face the threats from the network. To prevent the malicious users (or programs) from tampering with the SEDs, trusted platform module (TPM) is adopted, which can guarantee the system integrity via detecting unauthorized modifications to data and system environment. However, due to the limited scalability and insufficient system resources, not all SEDs can be deployed with TPM chips. To address this issue, in this paper, a TPM extension scheme (xTSeH) is proposed. In xTSeH, we have extended the functions of a TPM deployed in a SED (TSED) to those non-TPM-protected SEDs (N-TSED) via network. A shadow TPM in the form of a kernel module is designed as the trust base for the N-TSED, which is the representative of the TPM in TSED. Then, three protocols are proposed to implement the integrity verification and inter-SED authentication. Finally, a Raspberry Pi based prototype system is designed and implemented. The feasibility and usability of our scheme are proved by the analysis of the experimental results of system performance.

关键词： Internet of Things (IoT) smart eHealth device trusted platform module remote attestation TPM sharing

来源：评论

学校读者我要写书评

暂无评论

A Plausibly-Deniable, Practical trusted platform module Based Anti-Forensics Client-Server System

引用

IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS 2011年第7期29卷 1377-1391页

作者： Goh, Weihan Leong, Peng Chor Yeo, Chai Kiat Nanyang Technol Univ Sch Comp Engn Singapore 639798 Singapore

A trusted platform module (TPM) contains a unique identity and provides a range of security functions. This paper demonstrates a novel approach of using a TPM-enabled computer in a client-server system to hinder forensic examination. The prime motivation for this is to highlight the implications of such TPM-based approach in digital forensics for law enforcement agents. The system allows for data confidentiality, plausible deniability, and hiding of traces that data containing incriminating information was present on the client. The server will attest the client before allowing it to submit or receive encrypted data, and encrypted data containing incriminating information can only be decrypted 1) by the encrypting client, and 2) if and only if the encrypting client's platform configuration matches that during encryption. The client's state can always be established via measurement results, and they cannot be tampered to fake attestation.

关键词： anti-forensics information confidentiality plausible deniability trusted platform module

来源：评论

学校读者我要写书评

暂无评论

A trusted Architecture for Virtual Machines on Cloud Servers with trusted platform module and Certificate Authority

引用

JOURNAL OF SIGNAL PROCESSING SYSTEMS FOR SIGNAL IMAGE AND VIDEO TECHNOLOGY 2017年第2-3期86卷 327-336页

作者： Yu, Zhilou Zhang, Weipin Dai, Hongjun Southeast Univ Sch Informat Sci & Engn Nanjing 10096 Jiangsu Peoples R China Shandong Univ Dept Comp Sci & Technol Jinan 250101 Peoples R China

Virtualization and cloud computing can help an organization achieve significant datacenter savings in hardware costs, operational expenditures, and energy demands while achieving improvements in quality of service and business agility. The combination of a hardware based root of trust such as trust platform module (TPM) on virtual machine (VM) based system have being widely adopted. In this paper, combined with the trusted computing and cloud computing security, we establish a trust system with a certificate authority (CA) and trusted platform module (TPM). It takes the CA as the root of trust cloud computing platform. The servers use the TPM through the operations of acquisition, registration, certification for the certification and the operations of new construction, launch, running, transfer and maintenance for the virtual machine (VM). To implement the trusted ensure of the security, it designs the trusted module which take the TPM as the core, and develops the VM as a complete trust system with a measurement algorithm. It can be used into the VM authentication mechanism and the access user authentication mechanism of the VM.

关键词： Cloud security Certificate authority trusted platform module

来源：评论

学校读者我要写书评

暂无评论

A novel architecture to virtualise a hardware-bound trusted platform module

引用

FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF ESCIENCE 2024年 150卷 21-36页

作者： De Benedictis, Marco Jacquin, Ludovic Pedone, Ignazio Atzeni, Andrea Lioy, Antonio Politecn Torino Dip Automat & Informat Corso Duca Degli Abruzzi 24 I-10129 Turin Italy Hewlett Packard Enterprise Hewlett Packard Labs Bristol BS34 8QZ England

Security and trust are particularly relevant in modern softwarised infrastructures, such as cloud environments, as applications are deployed on platforms owned by third parties, are publicly accessible on the Internet and can share the hardware with other tenants. Traditionally, operating systems and applications have leveraged hardware tamper-proof chips, such as the trusted platform modules (TPMs) to implement security workflows, such as remote attestation, and to protect sensitive data against software attacks. This approach does not easily translate to the cloud environment, wherein the isolation provided by the hypervisor makes it impractical to leverage the hardware root of trust in the virtual domains. Moreover, the scalability needs of the cloud often collide with the scarce hardware resources and inherent limitations of TPMs. For this reason, existing implementations of virtual TPMs (vTPMs) are based on TPM emulators. Although more flexible and scalable, this approach is less secure. In fact, each vTPM is vulnerable to software attacks both at the virtualised and hypervisor levels. In this work, we propose a novel design for vTPMs that provides a binding to an underlying physical TPM;the new design, akin to a virtualisation extension for TPMs, extends the latest TPM 2.0 specification. We minimise the number of required additions to the TPM data structures and commands so that they do not require a new, non-backwards compatible version of the specification. Moreover, we support migration of vTPMs among TPM-equipped hosts, as this is considered a key feature in a highly virtualised environment. Finally, we propose a flexible approach to vTPM object creation that protects vTPM secrets either in hardware or software, depending on the required level of assurance.(c) 2023 The Authors. Published by Elsevier B.V. This is an open access article under the CC BY license (http://***/licenses/by/4.0/).

关键词： Computer security Trust management platform virtualization Cloud computing security trusted computing trusted platform module

来源：评论

学校读者我要写书评

暂无评论

A hijacker's guide to communication interfaces of the trusted platform module

引用

COMPUTERS & MATHEMATICS WITH APPLICATIONS 2013年第5期65卷 748-761页

作者： Winter, Johannes Dietrich, Kurt Graz Univ Technol Inst Appl Informat Proc & Commun A-8010 Graz Austria

In this paper, we analyze the communication of trusted platform modules and their interface to the hosting platforms. While trusted platform modules are considered to be tamper resistant, the communication channel between these modules and the rest of the trusted platform turns out to be comparatively insecure. It has been shown that passive attacks can be mounted against TPMs and their bus communication with fairly inexpensive equipment, however, similar active attacks have not been reported, yet. We pursue the idea of an active attack and show how the communication protocol of the LPC bus can be actively manipulated with basic and inexpensive equipment. Moreover, we show how our manipulations can be used to circumvent the security mechanisms, e.g. the chain of trust, provided by modern trusted platforms. In addition, we demonstrate how the proposed attack can be extended to manipulate communication buses on embedded systems. (C) 2012 Elsevier Ltd. All rights reserved.

关键词： trusted Computing trusted platform module Simple hardware attacks Embedded systems Security

来源：评论

学校读者我要写书评

暂无评论

A trusted platform module Based Anti-Forensics System

A Trusted Platform Module Based Anti-Forensics System

引用

International Conference on Network and Service Security

作者： Goh, Weihan Leong, Peng Chor Yeo, Chai Kiat Nanyang Technol Univ Sch Comp Engn Singapore Singapore

ISBN: (纸本)9781424439539

A trusted platform module (TPM) contains a unique identity and provides a range of security functions. This paper outlines a client-server system utilizing a TPM-enabled computer to hinder forensic examination. The system allows for data confidentiality, plausible deniability, and hiding of traces that incriminating data was present on the client. The server will attest the client before allowing it to submit / receive incriminating data, and encrypted incriminating data can only be decrypted 1) by the encrypting client, and 2) if and only if the encrypting client's platform configuration matches that during encryption. The client's state can always be established via measurement results, and they cannot be tampered to fake attestation.

关键词： anti-forensics trusted platform module information confidentiality plausible deniability

来源：评论

学校读者我要写书评

暂无评论

A hijacker's guide to communication interfaces of the trusted platform module

A hijacker's guide to communication interfaces of the truste...

引用

8th European Workshop on Public Key Infrastructures, Services, and Applications (EuroPKI)

作者： Winter, Johannes Dietrich, Kurt Graz Univ Technol Inst Appl Informat Proc & Commun A-8010 Graz Austria

关键词： trusted Computing trusted platform module Simple hardware attacks Embedded systems Security

来源：评论

学校读者我要写书评

暂无评论

A Key to Embedded System Security: Locking and Unlocking Secrets with a trusted platform module 8

A Key to Embedded System Security: Locking and Unlocking Sec...

引用

8th IEEE European Symposium on Security and Privacy (EuroS and P)

作者： Lenard, Teri Collen, Anastasija Nijdam, Niels A. Genge, Bela Univ Geneva Ctr Univ Informat Geneva Sch Econ & Management Geneva Switzerland Univ Med Pharm Sci & Technol Targu Mures Dept Elect Engn & Informat Technol George Emil Palade Targu Mures Romania

ISBN: (纸本)9798350327205

Security hardware modules were designed to provide a viable solution that can empower Embedded Systems (ES) with state-of-the-art cryptographic and security capabilities. They can execute cryptographic operations, securely store sensitive information, or provide measurements for attestation. A key element in designing and implementing security solutions on top of a security hardware, such as the trusted platform module (TPM), is secure secret storage. The work at hand addresses the problem of secret protection by showcasing how the TPM standard can serve as a vault in protecting sensitive information in ES. This is accomplished as follows. Secrets are locked in the TPM according to platform Configuration Register (PCR) policies created on top of the system state and sealing. In contrast, unlocking is achieved through TPM unsealing. In both cases, secure and authenticated sessions are enforced while communicating with the TPM. Furthermore, our work goes a step further and presents a simple TPM attestation protocol, destined to verify the system state and TPM application. Lastly, a series of experiments were conducted on a reference hardware, with two different TPM configurations, to measure execution times of TPM operations.

关键词： trusted platform module secure storage embedded systems

来源：评论

学校读者我要写书评

暂无评论

Personal trusted platform module for the Multi-Core System of 5G Security and Privacy 13

Personal Trusted Platform Module for the Multi-Core System o...

引用

13th International ELEKTRO Conference (ELEKTRO)

作者： Ruchkin, Vladimir Fulin, Vladimir Romanchuk, Vitaly Koryachko, Alexei Ruchkina, Ekaterina Ryazan State Univ Phys & Math Fac Ryazan Russia Ryazan State Radioengn Univ Cad Comp Facil Chair Ryazan Russia Ryazan State Radioengn Univ Hist Philosophy & Law Chair Ryazan Russia

ISBN: (纸本)9781728175423

The article is devoted to the choice of personal means of the 5G defense in dependence of hard- and software available to the user. The universal module MS 127.04 and its software compatible unit can be universally configured for use. An intelligent hardware and software platform is proposed for multi-core setting of policies for the automatic encryption of confidential data and selective blocking related to the implementation of computing security and confidentiality of data transfer, using such additional specially. A platform that resists the external influences is described. The platform is based on a universal module MS 127.05 (produced in Russia), that is a heterogeneous multiprocessor system on a chip), the system features 16 processor cores (NeuroMatrix Core 4) and five ARM Cortex-A5 units (ULSI 1879VM8Ya.

关键词： computer security confidentiality policy setting blocking application Virtualization Based Security trusted platform module Cyber-Physical Systems Internet of smart (mobile) CPSs Internet of Things 127.05 module NeuroMatrix Core 4 ARM Cortex-A5 ULSI 1879VM8Ya MPSoC

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：