TrustedComputingPlatformAllianceTheMother(board)ofall.ppt

Trusted Computing Platform Alliance: The Mother(board) of all Big Brothers Lucky Green c y p h e r p u n k s . t o TCPA’s Business Objectives Prevent use of unlicensed software. Digital Rights Management (DRM). Prevent CD ripping and DivX creation. Plug “analog hole.” Enable information flow control. Make PC the core of the home entertainment center, growing overall market. Meet operational needs of law enforcement and intelligence services (FBI, Homeland, NSA, non-U.S. law enforcement). TCPA’s Technical Objectives Prevent the owner of a computer from obtaining root access. Enforce three levels of access privileges: Privileged access [TCPA members only]. Underprivileged access [platform owner]. Unprivileged access [non-TCPA applications]. TCPA Heritage To succeed where previous efforts have failed: Processor ID (Intel, 1995-1998). Encrypted CPU instruction sets (Intel, 1995-TCPA Phase II). International Cryptography Framework (HP, 1996). Smartcards on motherboard (IBM, ongoing). TCPA History Founded in 1999 by: Intel Microsoft HP Compaq IBM TCPA Membership Profile The TCPA is a forum of platform product vendors. CPU: Intel, Advanced Micro Devices (AMD), Motorola. BIOS/Chips: Phoenix/Award, American Megatrends (AMI), National Semiconductor. Security: VeriSign, Wave Systems, RSA Security, Check Point, Certicom, Trend Micro, Symantec, Tripwire, Crypto AG [NSA]. Applications: Microsoft, Adobe. Systems: HP, IBM, Dell, Gateway, Fujitsu, Samsung, Toshiba. TCPA’s 170+ Member Companies TCPA’s Technology (Phase I) Trusted Platform Module (TPM), aka the “Fritz Chip.” Tamper resistant chip to be included on all future motherboards. Surface mount; either a separate part or integrated into the chipset. Common Criteria EAL3 [augmented] certified. TPM Functionality Categories Measurement Reporting TPM Measurement Cryptographic operations Key store Key management Boot process hashing TPM Internals Cryptographic operations: Hashing (SHA-1, HMAC). Random number generation (