Open-TEE -- An Open Virtual Trusted Execution Environment

McGillion, Brian; Dettenborn, Tanel; Nyman, Thomas; Asokan, N.

doi:10.1109/trustcom.2015.400

Cited by 66 publications

(46 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• probability of finding trust between two random nodes (Section IV-E) • average search time when a trusted path between two random nodes is to be established (Section IV-F) For host-related delays we employed a trusted computing enabled smart meter as described in [25], where the TEE environment is provided by Open-TEE [33]. We introduced the measured delay of signing a single digital certificate (38.47 ms) by the TEE to the simulation framework.…”

Section: B Implementationmentioning

confidence: 99%

See 1 more Smart Citation

Distributed Key Management in Microgrids

Bolgouras¹,

Ntantogian

Panaousis

et al. 2020

IEEE Trans. Ind. Inf.

View full text Add to dashboard Cite

Security for smart industrial systems is prominent due to the proliferation of cyber threats threatening national critical infrastructures. Smart grid comes with intelligent applications that can utilize the bidirectional communication network among its entities. Microgrids are small-scale smart grids that enable Machine-to-Machine (M2M) communications as they can operate with some degree of independence from the main grid. In addition to protecting critical microgrid applications, an underlying key management scheme is needed to enable secure M2M message transmission and authentication. Existing key management schemes are not adequate due to microgrid special features and requirements. We propose the Micro sElf-orgaNiSed mAnagement (MENSA), which is the first hybrid key management and authentication scheme that combines Public Key Infrastructure (PKI) and Web-of-Trust concepts in microgrids. Our experimental results demonstrate the efficiency of MENSA in terms of scalability and swiftness.

show abstract

Section: B Implementationmentioning

confidence: 99%

“…The main purpose of Open-TEE is to support the development of trusted applications without relying on any specific hardware platform. We have implemented MENSA by utilizing Open-TEE as a proof of concept but also taking into account an alternative use of Open-TEE mentioned by the authors of [33].…”

Section: B Implementationmentioning

confidence: 99%

Distributed Key Management in Microgrids

Bolgouras¹,

Ntantogian

Panaousis

et al. 2020

IEEE Trans. Ind. Inf.

View full text Add to dashboard Cite

show abstract

“…GlobalPlatform 7 publishes specifications for several TEEs (e.g., Op-Tee and [19]). We provide more details on Op-Tee in Section 3.3 (an implementation of such specifications), while briefly explaining the terminology in the remainder to understand Fig.…”

Section: The Globalplatform Standardmentioning

confidence: 99%

iperfTZ: Understanding Network Bottlenecks for TrustZone-Based Trusted Applications

Göttel¹,

Felber²,

Schiavoni³

2019

Lecture Notes in Computer Science

View full text Add to dashboard Cite

The growing availability of hardware-based trusted execution environments (TEEs) in commodity processors has recently advanced support (i.e., design, implementation and deployment frameworks) for network-based secure services. Examples of such TEEs include Arm TrustZone or Intel SGX, largely available in embedded, mobile and server-grade processors. TEEs shield services from compromised hosts, malicious users or powerful attackers. TEE-enabled devices are largely being deployed on the edge of the network, paving the way for large-scale deployments of trusted applications. These applications allow processing and disseminating sensitive data without having to trust cloud providers. However, uncovering network performance limitations of such trusted applications is difficult and currently lacking, despite the interest and reliance by developers and system deployers.iperfTZ is an open-source tool to uncover network performance bottlenecks rooted at the design and implementation of trusted applications for Arm TrustZone and underlying runtime systems. Our evaluation based on micro-benchmarks shows current trade-offs for trusted applications, both from a network as well as an energy perspective; an often overlooked yet relevant aspect for edge-based deployments.

show abstract

“…As described in GlobalPlatform [10] and explained by Brian McGillion et al [9], a device's OS can be separated in two distinct environments:…”

Section: B Arm Trustzone Technologymentioning

confidence: 99%

Ensuring the Authenticity and Fidelity of Captured Photos Using Trusted Execution and Mobile Application Licensing Capabilities

Papadamou¹,

Samaras²,

Sirivianos

2016

2016 11th International Conference on Availability, Reliability and Security (ARES)

View full text Add to dashboard Cite

Mobile devices, which users habitually carry along, have become the main data gateway for the majority of the online services. Any device is able to collect at any time various types of data through its sensors. At the same time, modern identification techniques ask users to send photos of their ID documentation in order to be verified by an online service. Those photos are captured by the device's camera and are considered extremely sensitive. They must be secured and establish that they will not be modified. This paper describes a security framework that preserves the authenticity of a captured photo and ensures that it remains intact while transferred to a remote server. The key insight is to use a background service that is tied to the photo-capturing application and uses secure key storing and cryptographic computation capabilities offered by the Trusted Execution Environment (TEE) of commodity Android devices. At the same time, we leverage Playstore's Licencing Verification Library (LVL) to remotely attest the authenticity of the photo-capturing application at registration time. We have implemented our framework as an Android application on a Nexus 5X, which is powered by a Qualcomm processor with ARM TrustZone Technology. The evaluation of our prototype implementation demonstrates the efficacy of the proposed framework in terms of performance overhead and usability.

show abstract

Open-TEE -- An Open Virtual Trusted Execution Environment

Cited by 66 publications

References 8 publications

Distributed Key Management in Microgrids

Distributed Key Management in Microgrids

iperfTZ: Understanding Network Bottlenecks for TrustZone-Based Trusted Applications

Ensuring the Authenticity and Fidelity of Captured Photos Using Trusted Execution and Mobile Application Licensing Capabilities

Contact Info

Product

Resources

About