{"title":"Integrating Trusted Platform Modules in Power Electronics","authors":"Ammar Khan, N. Blair, C. Farnell, H. Mantooth","doi":"10.1109/CyberPELS49534.2020.9311532","DOIUrl":null,"url":null,"abstract":"Trusted Platform Modules (TPMs) are specialized chips that store RSA keys specific to the host system for hardware authentication. The RSA keys refer to an encryption technology developed by RSA Data Security. The RSA algorithm accounts for the fact that there is no efficient way to factor extremely large numbers. Each TPM chip contains an RSA Key pair known as the Endorsement Key that cannot be accessed by software. The TPM contains an additional key, called the Attestation Identity Key that protects the device itself against unauthorized firmware and software modification by implementing hash functions on critical sections of the software and firmware before execution. As a result, the TPM can be used as a chip for handling encryption for a larger system to offer an additional layer of security. Furthermore, the TPM can also be used for managing encryption keys, as a Storage Root Key is created when a user or administrator takes ownership of the system. However, merging the TPM into a system does come with additional costs along with potential benefits. This paper focuses on integrating a TPM into a system implemented on an ARM processor that engages with power electronics, and then presents the security benefits associated with a TPM.","PeriodicalId":434320,"journal":{"name":"2020 IEEE CyberPELS (CyberPELS)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2020-10-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2020 IEEE CyberPELS (CyberPELS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CyberPELS49534.2020.9311532","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 1
Abstract
Trusted Platform Modules (TPMs) are specialized chips that store RSA keys specific to the host system for hardware authentication. The RSA keys refer to an encryption technology developed by RSA Data Security. The RSA algorithm accounts for the fact that there is no efficient way to factor extremely large numbers. Each TPM chip contains an RSA Key pair known as the Endorsement Key that cannot be accessed by software. The TPM contains an additional key, called the Attestation Identity Key that protects the device itself against unauthorized firmware and software modification by implementing hash functions on critical sections of the software and firmware before execution. As a result, the TPM can be used as a chip for handling encryption for a larger system to offer an additional layer of security. Furthermore, the TPM can also be used for managing encryption keys, as a Storage Root Key is created when a user or administrator takes ownership of the system. However, merging the TPM into a system does come with additional costs along with potential benefits. This paper focuses on integrating a TPM into a system implemented on an ARM processor that engages with power electronics, and then presents the security benefits associated with a TPM.
可信平台模块(tpm)是一种专门的芯片,用于存储主机系统专用的RSA密钥,以进行硬件身份验证。RSA密钥是RSA Data Security公司开发的一种加密技术。RSA算法解释了这样一个事实,即没有有效的方法来分解极大的数字。每个TPM芯片包含一个RSA密钥对,称为背书密钥,不能被软件访问。TPM包含一个额外的密钥,称为认证身份密钥,它通过在执行之前对软件和固件的关键部分实现哈希函数来保护设备本身免受未经授权的固件和软件修改。因此,TPM可以用作处理大型系统加密的芯片,以提供额外的安全层。此外,TPM还可以用于管理加密密钥,因为当用户或管理员获得系统所有权时将创建存储根密钥。但是,将TPM合并到系统中确实会带来额外的成本以及潜在的好处。本文重点介绍了将TPM集成到一个基于ARM处理器的系统中,该系统与电力电子器件相结合,然后介绍了与TPM相关的安全优势。