TPMsStrengthenUser_and_PlatformAuthenticity

Trusted

Platform

需积分: 6 67 浏览量 2019-09-19 09:45:28 上传评论收藏 172KB PDF 举报

资源推荐

资源详情

资源评论

Trusted Platform Modules Strengthen User and Platform Authenticity

January 2005

Computing and communications products with embedded Trusted Platform Modules (TPMs)

advance the ability of businesses, institutions, government agencies, and consumers to conduct

trustworthy electronic transactions. TPMs are special-purpose integrated circuits (ICs) built into a

variety of platforms to enable strong user authentication and machine attestation—essential to

prevent inappropriate access to confidential and sensitive information and to protect against

compromised networks. Trusted Platform Modules utilize open standards and technologies to

ensure interoperability of diverse products in mixed-vendor environments.

Trustworthy Transactions

Businesses of all sizes, institutions, government agencies, and consumers rely on millions of

digital transactions everyday. The volume and the importance of these transactions are rapidly

increasing. Wired and wireless systems used in digital interactions are woven into the very fabric

of business and everyday life around the world. Being able to trust the identities of the

participants, the authenticity of the contents, and the integrity of the systems involved in digital

events is crucial. Robust security is essential for trusted communications; but it is surprising how

many organizations rely on weak security solutions, believing they are engaged in trustworthy

processes when they are not. It has been estimated that more than half of all desktop, laptop, and

notebook PCs lack today’s available software security features. To address the risks caused by

inadequate security, integrated security hardware in the platform can not only strengthen the

software solutions, but also assure that every platform comes with strong protection built in.

When the integrity of the services isn’t reliable and cannot be proved, the consequence may be

catastrophic. Victims of stolen personal, confidential, or sensitive information lose much more

than data. Unauthorized changes to system parameters generate unintended expenses for

system rebuilding and may jeopardize the future of an enterprise. If that’s not bad enough,

consider that corruption of important records—or even the perception of compromised integrity—

may have severe legal consequences with criminal and civil penalties.

Intruders hack into networks with increasing frequency. Malicious corruption of records and

inadequately protected systems regularly compromise legitimate transactions. Lost and stolen

laptops can be a gold mine of critical information and a free pass to the network. Even cell

phones and PDAs are under attack. Hardware-based, embedded security subsystems based on

TPM chips provide reliable protections against these issues and enable truly cost-effective

implementation and enforcement of strong security policies to ensure trustworthy transactions.

Strong User Authentication and Device Validation

Strong user authentication and device validation are essential for trusted digital interactions. Both

are necessary to protect against inappropriate access to sensitive and confidential information

and valued systems. Both are required to protect the integrity of the information, prevent

corruption of the files, and ensure the integrity of those systems. Ultimately, it comes down to two

basic questions:

 Who are you and how do I know this is true?

 Can I trust this interaction and how do I know this is true?

Who are you and how do I know this is true? All of the parties engaged in an important electronic

transaction need to know that who they claim to be is really true. They could be corporate officers

making 10K filings, doctors exchanging patient records, government clerks providing copies of

birth certificates or deeds, businesses ordering critical parts, or consumers shopping on-line. The

need to demonstrate their own authenticity and verify the reputed authenticity of the other party

has never been more important. Software-only login and sign-on schemes provide only weak

security. TPM-capable systems use both hardware and software to ensure spoof-proof user

authentication to assure that the authenticity of the parties in digital transactions can be trusted.

Can I trust this interaction and how do I know this is true? It is also essential in trusted digital

interactions to know that the systems, software, and records involved are what they claim to be.

What if an on-line banking transaction is corrupted—wrong bank, wrong account, or the decimal

point goes awry? What if confidential records are intercepted or misdirected and don’t get to a

patient’s medical center or the SEC? Or, maybe, it is the right server, but the path leads to the

wrong file or the file was corrupted after it was created? The integrity of the networks and

resources must be ensured and it must be verifiable that they are used as intended.

It must also be assured that important records that were properly created and transmitted are

also stored intact and uncorrupted. They must be retrievable at a later date exactly as they were

created. Corrupted Social Security records, corporate 10K SEC filings, and medical records are

but a few examples whose consequences can be devastating. In the United States, recent

legislation imposes new requirements for safeguarding various types of sensitive data.

TPM-capable systems can play a strong role in assuring compliance with provisions of the Health

Insurance Portability and Accountability Act (HIPAA) of 1996 to protect medical records, as well

as Graham-Leech-Bliley, Sarbanes-Oxley and similar regulations that impose privacy and validity

requirements on corporate communications. Similar laws exist in other countries as well.

TPM-Capable Solutions Reduce Risk and Increase Reliability

Inadequate security has been tolerated because the risks were perceived as low and the

solutions were perceived as cumbersome, expensive, and proprietary. These risks are no longer

low and TPM-capable products provide easy to use, inexpensive solutions based on open

standards. The trade-off between weak security versus unmanageable and proprietary security

solutions is no longer an issue when network administrators can implement robust security

policies based on open standards and protocols and deploy TPM-capable systems and software

from many vendors.

User Authentication without TPM User Authentication with TPM

 Inadequate user ID and password

protection makes “spoofing” very easy

 Strong protections eliminate “spoofing”;

verifies integrity of user log-in credentials

 Multiple log-in IDs and passwords cause

users to be careless; store secrets without

protecting them; use weak protections

 On-chip, protected storage of secrets

reduces user burden; enables secure single

sign-on; ensures strong protections

 Storage of IDs and passwords in easily

copied files; use of one set of secrets for

access to all systems

 Secure storage of IDs and passwords;

multiple log-in secrets secured by the TPM

Platform Attestation without TPM Platform Attestation with TPM

 Easy to change settings and parameters

for unauthorized access and malicious

damage

 Secure access prevents unauthorized

access; secure hash comparison validates

settings

 Altered settings allow inappropriate access

to valued networks and sensitive data

 Validated settings ensure system integrity

and prevent inappropriate access

 Untrustworthy systems result in unreliable

 Trustworthy systems result in reliable and

剩余7页未读，继续阅读

评论收藏

内容反馈

ymeish

粉丝: 0
资源: 19

TPMs Strengthen User_and_Platform Authenticity_Final

最新资源

TPMs Strengthen User_and_Platform Authenticity_Final

TPMS.rar_ TPMS_TPMS_TPMS sourcecode_TPMS win_TPMS.rar

TPMS.rar_TPMS_TPMS CAN 1939

TPMS_Bootloader_v1.2.rar

TPMS-10a_1.zip

TPMS.rar_TPMS_pic16f887

TransmitterRF2AssemblyCode.rar_TPMS_tpms2rar_胎压_胎压检测

sender.rar_TPMS_renault_原理图_胎压_胎压检测

SP37_LF_Wakeup and Data Receiving.rar_LF低频唤醒_TPMS_TPMS-SP37_sp37

TPMS_MKW01_LF_RF_Communication_KDS3_rev1.rar

tpms胎压烧录文件

receiver.rar_TPMS_原理图_胎压_胎压检测

GB261492017_opportunity63m_GB26149-2017_TPMS国标_

8500固件函数库

TPMS_Diagram.pdf

tpm_i2c_atmel.rar_TPMS_tpm i2c

TPMS解决方案中的几个关键问题.rar

TPMS设计技术与难点解析

AN12523_FW_LIB verison.pdf

tpms Infineon方案源码

TPMS说明书.pdf

TPMS单元点云数据转obj

计算机软硬件行业TPMS芯片专题报告：国产TPMS芯片的成长机会-20191224-华泰证券-19页.pdf

基于MATLAB_xPC的TPMS数据采集与处理系统的研究与开发_毕业论文.pdf

freescale的TPMS白皮书

基于TPMS单元的空间融合设计

基于ZigBee无线网络技术和无线收发芯片CC1100的TPMS

A Practical Guide to TPM 2.0 Using the Trusted Platform Module

2021年中国轮胎压力监测系统（TPMS）产业链及发展洞察.pdf

TPMS在线检测系统培训.pptx

最新资源