A protocol for property-based attestation

Chen, Liqun; Landfermann, Rainer; Löhr, Hans; Rohe, Markus; Sadeghi, Ahmad-Reza; Stüble, Christian

doi:10.1145/1179474.1179479

Cited by 156 publications

(107 citation statements)

References 17 publications

Supporting

Mentioning

106

Contrasting

Unclassified

Order By: Relevance

“…For example, certain components might have unique properties that may not be available in other components or a component can be challenged for different properties to work out what implementations are available and what is not. One recent proposal to enhance privacy in Property Based Attestation is based on the Zero Knowledge Protocol [16]. The protocol assumes that a property certificate is issued as a mapping between a state of a component and its properties.…”

Section: Discussionmentioning

confidence: 99%

On the Applicability of Trusted Computing in Distributed Authorization Using Web Services

Nagarajan

Varadharajan

Hitchens

et al. 2008

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Distributed authorization provides the ability to control access to resources spread over the Internet. Typical authorization systems consider a range of security information like user identities, role identities or even temporal, spatial and contextual information associated with the access requestor. However, the ability to include computing platform related information has been quite limited due to constraints in identification and validation of platforms when distributed. Trusted computing is an exciting technology that can provide new ways to bridge this gap. In this paper, we provide the first steps necessary to achieving distributed authorization using trusted computing platforms. We introduce the notion of a Property Manifest that can be used in the specification of authorization policies. We provide an overview of our authorization architecture, its components and functions. We then illustrate the applicability of our system by implementing it in a Web service oriented architecture.

show abstract

Section: Discussionmentioning

confidence: 99%

On the Applicability of Trusted Computing in Distributed Authorization Using Web Services

Nagarajan

Varadharajan

Hitchens

et al. 2008

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…a hash of the raw evidence), or by substitution with a credential provided by a third party evaluator of the raw evidence. For example, an SSL certificate authority may consume many attestations as to the identity and practices of a target before producing one certificate attesting to the quality of a target [4].…”

Section: Terminologymentioning

confidence: 99%

“…A natural way to reconcile these two principles is to allow appraiser and target to agree on an attestation proxy that is partially trusted by each [4]. The target trusts the proxy to disclose only information about its state which is of limited sensitivity.…”

Section: Attestation Delegationmentioning

confidence: 99%

“…These authors and several others go on to propose a protocol for performing such property-based attestations [4]. This protocol could be implemented as an ASP in our system.…”

Section: Existing Approaches To Attestationmentioning

confidence: 99%

“…For example, in [11], the author uses the term attestation to specifically mean the process of transmitting a sequence of hashes of certain system components and a digital signature of that sequence; in Microsoft's "NGSCB" [7] it refers to identification and authentication of known code via digital signatures; Copilot [18] makes use of direct hashes of kernel memory, and so on. We prefer a general definition of platform attestation that abstracts from specific desired properties, an approach that matches a promising line of work on "property-based attestation" [4].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Principles of remote attestation

Coker

Guttman

Loscocco

et al. 2011

Int. J. Inf. Secur.

183

106

View full text Add to dashboard Cite

Abstract. Remote attestation is the activity of making a claim about properties of a target by supplying evidence to an appraiser over a network. We identify five central principles to guide development of attestation systems. We argue that (i) attestation must be able to deliver temporally fresh evidence; (ii) comprehensive information about the target should be accessible; (iii) the target, or its owner, should be able to constrain disclosure of information about the target; (iv) attestation claims should have explicit semantics to allow decisions to be derived from several claims; and (v) the underlying attestation mechanism must be trustworthy. We illustrate how to acquire evidence from a running system, and how to transport it via protocols to remote appraisers. We propose an architecture for attestation guided by these principles. Virtualized platforms, which are increasingly well supported on stock hardware, provide a natural basis for our attestation architecture.

show abstract

Background

2014

Cloud Management and Security

View full text Add to dashboard Cite

A protocol for property-based attestation

Cited by 156 publications

References 17 publications

On the Applicability of Trusted Computing in Distributed Authorization Using Web Services

On the Applicability of Trusted Computing in Distributed Authorization Using Web Services

Principles of remote attestation

Background

Contact Info

Product

Resources

About