A User Centric Security Model for Tamper-Resistant Devices

1.4 Contributions
the UCTD manufacturing, to the application download and execution, to decommissioning
at the end of the UCTD's lifetime. The main contribution of the thesis is the development
of a user centric framework for tamper-resistant security-sensitive devices. To accomplish
this, we propose several changes to existing smart card architecture, including changes to
the application management framework, the application download protocols, the smart
card rewall mechanism, and nally the application execution environment.
We propose a new architecture for the smart card platform, including the remote attestation
and security assurance mechanism. These changes will enable an SP to ascertain
whether the current state of a platform is trustworthy. Furthermore, we propose a framework
to securely backup the contents of a smart card and restore them (when required)
to any other smart card. This latter mechanism allows a rapid recovery if the existing
smart card is stolen or corrupted (i.e. cannot work), and also facilitates migration from
one device to another.
Issuance
(Chapters 3-4)
Decommission
(Chapter 9)
Application
Acquisition
(Chapters 5-6)
Execution
(Chapter 8)
Localisation
(Chapter 7)
Figure 1.1: Life cycle of UCTDs in relation to a user and an application
The life cycle stages of a UCTD in relation to its provision of dierent functionality or
features to the respective user or SP are shown in gure 1.1. Each depicted stage of the
UCTD also has a corresponding chapter or chapters in the thesis.
The rst stage in the life cycle of a UCTD is the issuance phase that includes manufacturing
and issuance of the UCTDs along with the ownership acquisition by the users.
In the second stage referred as Application Acquisition, the user requests an SP to lease its
application(s) to the acquired UCTD. This process encompasses the dynamic establishment
of a trust relationship between the SP and the UCTD along with the downloading of the
(requested) application.
27