DMCA
Key Attestation from Trusted Execution Environments
| Citations: | 2 - 1 self |
BibTeX
@MISC{Kostiainen_keyattestation,
author = {Kari Kostiainen and Ra Dmitrienko and Jan-erik Ekberg and Ahmad-reza Sadeghi and N. Asokan},
title = {Key Attestation from Trusted Execution Environments},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract. Credential platforms implemented on top of Trusted Execution Environments 3 (TrEEs) allow users to store and use their credentials, e.g., cryptographic keys or user passwords, securely. One important requirement for a TrEE-based credential platform is the ability to attest that a credential has been created and is kept within the TrEE. Credential properties, such as usage permissions, should be also attested. Existing attestation mechanisms are limited to attesting which applications outside the TrEE are authorized to use the credential. In this paper we describe a novel key attestation mechanism that allows attestation of both TrEE internal and external key usage permissions. We have implemented this attestation mechanism for mobile phones with M-Shield TrEE. 1
Keyphrases
trusted execution environment key attestation attestation mechanism mobile phone usage permission credential platform novel key attestation mechanism external key usage permission credential property user password cryptographic key m-shield tree tree-based credential platform important requirement
