A User Centric Security Model for Tamper-Resistant Devices

Chapter 4
User Centric Smart Card
Architecture
Contents
4.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
4.2 Platform Architecture . . . . . . . . . . . . . . . . . . . . . . . . 80
4.3 Trusted Environment & Execution Manager . . . . . . . . . . . 85
4.4 Security Assurance and Validation Mechanism . . . . . . . . . . 90
4.5 Attestation Mechanisms . . . . . . . . . . . . . . . . . . . . . . . 93
4.6 Device Ownership . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
4.7 Attestation Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . 101
4.8 Protocol Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
4.9 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
In this chapter, we discuss the security and operational architecture of the UCOM supported
platform, termed the User Centric Smart Card (UCSC). Subsequently, we detail
the inclusion of a trusted computing platform for smart cards that we refer as the Trusted
Environment & Execution Manager (TEM). This is followed by the rationale behind the
changes to the traditional smart card architecture to accommodate the remote security assurance
and validation mechanism. We propose an attestation protocol that provides an
online security validation of a smart card by its manufacturer. Finally, the attestation protocol
is informally analysed, and its test implementation and performance are presented.
79