Method and Apparatus for Providing Security to Devices

Patent metadata

Field	Value
Publication number	US-2016306975-A1
Application number	US-201615193348-A
Country	US
Kind code	A1
Filing date	Jun 27, 2016
Priority date	Mar 5, 2010
Publication date	Oct 20, 2016
Grant date	—

Abstract

Systems, methods, and apparatus are provided for generating verification data that may be used for validation of a wireless transmit-receive unit (WTRU). The verification data may be generated using a tree structure having protected registers, represented as root nodes, and component measurements, represented as leaf nodes. The verification data may be used to validate the WTRU. The validation may be performed using split-validation, which is a form of validation described that distributes validation tasks between two or more network entities. Subtree certification is also described, wherein a subtree of the tree structure may be certified by a third party.

First claim

What is claimed:

1 . A method for verifying the trustworthiness of one or more software or hardware components of a device, comprising:
receiving from the device verification data generated by the device, wherein the verification data comprises at least a portion of a tree structure formed by the device, in which the roots of the tree structure contain verification data from one or more secure registers of the device, inner nodes of the tree structure are defined by a measurement log generated by the device, and the leaves of the tree structure store integrity measurement values from the measurement log generated by the device; comparing the at least a portion of the tree structure received from the device to a corresponding reference tree structure to determine whether any of the received integrity measurement values match corresponding reference measurement values of the reference tree structure; and verifying the trustworthiness of the one or more software or hardware components of the device based on a result of the comparison.

Assignees

• Interdigital Patent Holdings Inc

Inventors

• Schmidt Andreas
• Leicher Andreas
• Cha Inhyok
• Pattar Sudhir B
• Shah Yogendra C

Classifications

• H04L9/3265

  using certificate chains, trees or paths; Hierarchical trust model · CPC title

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• G06F16/2246

  Trees, e.g. B+trees · CPC title

• H04L9/3234 Primary

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title