On implementing trusted boot for embedded systems

2013 IEEE International Symposium on Hardware-Oriented Security and Trust (HOST) Pub Date : 2013-06-02 DOI:10.1109/HST.2013.6581569

Obaid Khalid, C. Rolfes, A. Ibing

{"title":"On implementing trusted boot for embedded systems","authors":"Obaid Khalid, C. Rolfes, A. Ibing","doi":"10.1109/HST.2013.6581569","DOIUrl":null,"url":null,"abstract":"This paper presents an implementation of trusted boot for embedded systems. While in PCs the trusted computing hardware functionality is spread over CPU, memory controller hub (MCH), IO controller hub (ICH) and Trusted Platform Module (TPM), for embedded systems it is desirable to integrate the whole functionality in one system on chip. Our implementation is a two-processor design with LEON3 open source soft cores (SPARC V8 instruction set), coupled over an AHB interface. One of the processors acts as application processor, the other one as `secure' coprocessor. The application processor is synthesized with a boot ROM as static root of trust for measurement. The `secure' coprocessor runs TPM frmware and enables the application processor to boot and run different software while sealing corresponding keys and other secrets to the respective software identity (computed as hash value). We evaluate the design in a Virtex5 FPGA with respect to different measures like resource consumption, code sizes and start times. The `trusted boot' functionality is realised with a boot time increase of around 25% for a Linux system.","PeriodicalId":6337,"journal":{"name":"2013 IEEE International Symposium on Hardware-Oriented Security and Trust (HOST)","volume":"1970 1","pages":"75-80"},"PeriodicalIF":0.0000,"publicationDate":"2013-06-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"24","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2013 IEEE International Symposium on Hardware-Oriented Security and Trust (HOST)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/HST.2013.6581569","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 24

Abstract

This paper presents an implementation of trusted boot for embedded systems. While in PCs the trusted computing hardware functionality is spread over CPU, memory controller hub (MCH), IO controller hub (ICH) and Trusted Platform Module (TPM), for embedded systems it is desirable to integrate the whole functionality in one system on chip. Our implementation is a two-processor design with LEON3 open source soft cores (SPARC V8 instruction set), coupled over an AHB interface. One of the processors acts as application processor, the other one as `secure' coprocessor. The application processor is synthesized with a boot ROM as static root of trust for measurement. The `secure' coprocessor runs TPM frmware and enables the application processor to boot and run different software while sealing corresponding keys and other secrets to the respective software identity (computed as hash value). We evaluate the design in a Virtex5 FPGA with respect to different measures like resource consumption, code sizes and start times. The `trusted boot' functionality is realised with a boot time increase of around 25% for a Linux system.

查看原文本刊更多论文

嵌入式系统可信引导的实现

本文提出了一种嵌入式系统可信启动的实现方法。在pc中，可信计算硬件功能分布在CPU、内存控制器集线器(MCH)、IO控制器集线器(ICH)和可信平台模块(TPM)上，而对于嵌入式系统，希望将整个功能集成在一个芯片上的系统中。我们的实现是一个带有LEON3开源软核(SPARC V8指令集)的双处理器设计，通过AHB接口耦合。其中一个处理器充当应用处理器，另一个作为“安全”协处理器。应用处理器是用一个引导ROM作为测量的静态信任根来合成的。“安全”协处理器运行TPM固件，并使应用处理器能够启动和运行不同的软件，同时将相应的密钥和其他秘密密封到各自的软件身份(以散列值计算)。我们根据资源消耗、代码大小和启动时间等不同指标在Virtex5 FPGA中评估设计。对于Linux系统，“可信启动”功能的实现使启动时间增加了大约25%。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

2013 IEEE International Symposium on Hardware-Oriented Security and Trust (HOST)

自引率

0.00%

发文量