Using TPM Secure Storage in Trusted High Availability Systems

Martin Hell; Linus Karlsson; Ben Smeets; Jelena Mirosavljevic

doi:10.1007/978-3-319-27998-5_16

Using TPM Secure Storage in Trusted High Availability Systems

Martin Hell, Linus Karlsson, Ben Smeets, Jelena Mirosavljevic

Research output: Chapter in Book/Report/Conference proceeding › Paper in conference proceeding › peer-review

469 Downloads (Pure)

Abstract

We consider the problem of providing trusted computing
functionality in high availability systems. We consider the case where
data is required to be encrypted with a TPM protected key. For redundancy,
and to facilitate high availability, the same TPM key is stored in
multiple computational units, each one ready to take over if the main
unit breaks down. This requires the TPM key to be migratable. We show
how such systems can be realized using the secure storage of the TPM.
Hundreds of millions TPM 1.2 chips have been shipped but with the recent
introduction of TPM 2.0, more manufacturers are expected to start
shipping this newer TPM. Thus, a migration from TPM 1.2 to TPM 2.0
will likely be seen in the next few years. To address this issue, we also
provide an API that allows a smooth upgrade from TPM 1.2 to TPM
2.0 without having to redesign the communication protocol involving the
dierent entities. The API has been implemented for both TPM 1.2 and
TPM 2.0.

Original language	English
Title of host publication	Trusted Systems/Lecture Notes in Computer Science
Editors	Moti Yung, Liehuang Zhu, Yanjiang Yang
Publisher	Springer
Pages	243-258
Volume	9473
ISBN (Electronic)	978-3-319-27998-5
ISBN (Print)	978-3-319-27997-8
DOIs	https://doi.org/10.1007/978-3-319-27998-5_16
Publication status	Published - 2014
Event	INTRUST 2014 - Beijing, China Duration: 2014 Dec 16 → 2014 Dec 17

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	9473
ISSN (Print)	0302-9743

Conference

Conference	INTRUST 2014
Country/Territory	China
City	Beijing
Period	2014/12/16 → 2014/12/17

Subject classification (UKÄ)

Electrical Engineering, Electronic Engineering, Information Engineering

Free keywords

Trusted Computing
TPM
Migration
Certiable Migration Key
Secure Storage

Access to Document

10.1007/978-3-319-27998-5_16

PaperAccepted author manuscript, 304 KB

1 Doctoral Thesis (compilation)

Contributions to Preventive Measures in Cyber Security
Karlsson, L., 2019 Sept 30, Department of Electrical and Information Technology, Lund University. 205 p.
Research output: Thesis › Doctoral Thesis (compilation)

Open Access
File

Cite this

@inproceedings{06badd55b4074ba5ac78b68da3db342b,

title = "Using TPM Secure Storage in Trusted High Availability Systems",

abstract = "We consider the problem of providing trusted computing functionality in high availability systems. We consider the case where data is required to be encrypted with a TPM protected key. For redundancy, and to facilitate high availability, the same TPM key is stored in multiple computational units, each one ready to take over if the main unit breaks down. This requires the TPM key to be migratable. We show how such systems can be realized using the secure storage of the TPM. Hundreds of millions TPM 1.2 chips have been shipped but with the recent introduction of TPM 2.0, more manufacturers are expected to start shipping this newer TPM. Thus, a migration from TPM 1.2 to TPM 2.0 will likely be seen in the next few years. To address this issue, we also provide an API that allows a smooth upgrade from TPM 1.2 to TPM 2.0 without having to redesign the communication protocol involving the dierent entities. The API has been implemented for both TPM 1.2 and TPM 2.0.",

keywords = "Trusted Computing, TPM, Migration, Certiable Migration Key, Secure Storage",

author = "Martin Hell and Linus Karlsson and Ben Smeets and Jelena Mirosavljevic",

year = "2014",

doi = "10.1007/978-3-319-27998-5_16",

language = "English",

isbn = "978-3-319-27997-8",

volume = "9473",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "243--258",

editor = "Moti Yung and Liehuang Zhu and Yanjiang Yang",

booktitle = "Trusted Systems/Lecture Notes in Computer Science",

address = "Germany",

note = "INTRUST 2014 ; Conference date: 16-12-2014 Through 17-12-2014",

}

Hell, M, Karlsson, L, Smeets, B & Mirosavljevic, J 2014, Using TPM Secure Storage in Trusted High Availability Systems. in M Yung, L Zhu & Y Yang (eds), Trusted Systems/Lecture Notes in Computer Science. vol. 9473, Lecture Notes in Computer Science, vol. 9473, Springer, pp. 243-258, INTRUST 2014, Beijing, China, 2014/12/16. https://doi.org/10.1007/978-3-319-27998-5_16

Using TPM Secure Storage in Trusted High Availability Systems. / Hell, Martin; Karlsson, Linus; Smeets, Ben et al.
Trusted Systems/Lecture Notes in Computer Science. ed. / Moti Yung; Liehuang Zhu; Yanjiang Yang. Vol. 9473 Springer, 2014. p. 243-258 (Lecture Notes in Computer Science; Vol. 9473).

Research output: Chapter in Book/Report/Conference proceeding › Paper in conference proceeding › peer-review

TY - GEN

T1 - Using TPM Secure Storage in Trusted High Availability Systems

AU - Hell, Martin

AU - Karlsson, Linus

AU - Smeets, Ben

AU - Mirosavljevic, Jelena

PY - 2014

Y1 - 2014

N2 - We consider the problem of providing trusted computing functionality in high availability systems. We consider the case where data is required to be encrypted with a TPM protected key. For redundancy, and to facilitate high availability, the same TPM key is stored in multiple computational units, each one ready to take over if the main unit breaks down. This requires the TPM key to be migratable. We show how such systems can be realized using the secure storage of the TPM. Hundreds of millions TPM 1.2 chips have been shipped but with the recent introduction of TPM 2.0, more manufacturers are expected to start shipping this newer TPM. Thus, a migration from TPM 1.2 to TPM 2.0 will likely be seen in the next few years. To address this issue, we also provide an API that allows a smooth upgrade from TPM 1.2 to TPM 2.0 without having to redesign the communication protocol involving the dierent entities. The API has been implemented for both TPM 1.2 and TPM 2.0.

AB - We consider the problem of providing trusted computing functionality in high availability systems. We consider the case where data is required to be encrypted with a TPM protected key. For redundancy, and to facilitate high availability, the same TPM key is stored in multiple computational units, each one ready to take over if the main unit breaks down. This requires the TPM key to be migratable. We show how such systems can be realized using the secure storage of the TPM. Hundreds of millions TPM 1.2 chips have been shipped but with the recent introduction of TPM 2.0, more manufacturers are expected to start shipping this newer TPM. Thus, a migration from TPM 1.2 to TPM 2.0 will likely be seen in the next few years. To address this issue, we also provide an API that allows a smooth upgrade from TPM 1.2 to TPM 2.0 without having to redesign the communication protocol involving the dierent entities. The API has been implemented for both TPM 1.2 and TPM 2.0.

KW - Trusted Computing

KW - TPM

KW - Migration

KW - Certiable Migration Key

KW - Secure Storage

U2 - 10.1007/978-3-319-27998-5_16

DO - 10.1007/978-3-319-27998-5_16

M3 - Paper in conference proceeding

SN - 978-3-319-27997-8

VL - 9473

T3 - Lecture Notes in Computer Science

SP - 243

EP - 258

BT - Trusted Systems/Lecture Notes in Computer Science

A2 - Yung, Moti

A2 - Zhu, Liehuang

A2 - Yang, Yanjiang

PB - Springer

T2 - INTRUST 2014

Y2 - 16 December 2014 through 17 December 2014

ER -

Using TPM Secure Storage in Trusted High Availability Systems

Abstract

Publication series

Conference

Subject classification (UKÄ)

Free keywords

Access to Document

Fingerprint

Research output

Contributions to Preventive Measures in Cyber Security

Cite this