Research on Root of Trust for Embedded Devices based on On-Chip Memory

Abstract

Aiming at the problem that embedded devices generally lack hardware trust root and cannot use trusted computing technology to guarantee their operating environment, this paper proposes a method of using on-chip storage to provide trust root and trusted computing services for embedded devices. The physical unclonable function of on-chip memory is used to implement basic security mechanisms such as key storage and random numbers, and then builds a trusted computing environment based on these security mechanisms. The root of trust includes trusted computing primitives such as data sealing and unsealing. The root of trust can provide basic trusted computing services for embedded devices, so that it ensures the security and controllability of the whole embedded device running environment. In this paper, a prototype system is implemented on a hardware embedded device. The test results of prototype system show that the trusted computing root of trust construction method proposed only adds a small amount of basic code lines to the system, and its performance can meet the requirements of embedded applications.