{"title":"TM-Coin: Trustworthy management of TCB measurements in IoT","authors":"Jaemin Park, Kwangjo Kim","doi":"10.1109/PERCOMW.2017.7917640","DOIUrl":null,"url":null,"abstract":"Remote attestation is used to enable verifiers to check if an underlying Trusted Computing Base (TCB) of a device and data from the TCB are trustworthy. However, the current remote attestation has limitations to be deployed in IoT from the perspective of the management in a massive and diverse collection of TCB measurements and the redundant execution of remote attestation. To mitigate these limitations, we present a trustworthy management of TCB measurements called TM-Coin (TCB Measurement-Coin) using the blockchain and ARM TrustZone. The TM-Coin transactions and protocol are presented to manage the TCB measurements of IoT devices using the blockchain, a decentralized database. The trusted execution environment provided by ARM TrustZone is used as the TCB to generate the TM-Coin transactions securely. Based on TM-Coin, the verifiers launch remote attestation of sensed data from the devices using the TCB measurements published in the blockchain without attesting to the TCB. We implemented a prototype to evaluate the performance overhead caused by TM-Coin.","PeriodicalId":319638,"journal":{"name":"2017 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops)","volume":"109 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2017-03-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"23","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2017 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/PERCOMW.2017.7917640","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 23
Abstract
Remote attestation is used to enable verifiers to check if an underlying Trusted Computing Base (TCB) of a device and data from the TCB are trustworthy. However, the current remote attestation has limitations to be deployed in IoT from the perspective of the management in a massive and diverse collection of TCB measurements and the redundant execution of remote attestation. To mitigate these limitations, we present a trustworthy management of TCB measurements called TM-Coin (TCB Measurement-Coin) using the blockchain and ARM TrustZone. The TM-Coin transactions and protocol are presented to manage the TCB measurements of IoT devices using the blockchain, a decentralized database. The trusted execution environment provided by ARM TrustZone is used as the TCB to generate the TM-Coin transactions securely. Based on TM-Coin, the verifiers launch remote attestation of sensed data from the devices using the TCB measurements published in the blockchain without attesting to the TCB. We implemented a prototype to evaluate the performance overhead caused by TM-Coin.