A User Centric Security Model for Tamper-Resistant Devices

Chapter 6
Secure and Trusted Channel Protocol
Contents
6.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
6.2 Secure Channel Protocols . . . . . . . . . . . . . . . . . . . . . . 129
6.3 Secure and Trusted Channel Protocol Service Provider . . 136
6.4 Secure and Trusted Channel Protocol Smart Card . . . . . 139
6.5 Application Acquisition and Contractual Agreement Protocol 141
6.6 Analysis of the Proposed Protocols . . . . . . . . . . . . . . . . . 146
6.7 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
In this chapter, we begin with a discussion of secure channel protocols that are used for
entity authentication and key establishment for internet services. We discuss the security
and operational goals that a secure channel protocol has to accomplish in the UCTD environment.
We propose two protocols that closely adhere to the UCOM philosophy and
a protocol related to the CASC that involves an administrative authority (e.g. TSM). An
informal analysis is provided for the proposed protocols followed by a mechanical formal
analysis using CasperFDR. Finally, we describe a prototype implementation of the proposed
protocols, and give performance measurements obtained from this implementation.
127