HistoTrust: Attestation of a Data History based on off-the-shelf Secure Hardware Components - CEA - Commissariat à l’énergie atomique et aux énergies alternatives Access content directly
Conference Papers Year : 2021

HistoTrust: Attestation of a Data History based on off-the-shelf Secure Hardware Components

Abstract

Device- or user-centric system architectures allow everyone to manage their personal or confidential data. But how to provide the trust required between the stakeholders of a given ecosystem to work together, each preserving their interest and their business? HistoTrust introduces a solution to this problem. A system architecture separating the data belonging to each stakeholder and the cryptographic proofs (attestations) on their history is implemented. An Ethereum ledger is deployed to maintain the history of the attestations, thus guaranteeing their tamper-resistance, their timestamp and their order. The ledger allows these attestations to be shared between the stakeholders in order to create trust without revealing secret or critical data. In each IoT device, the root-of-trust secrets used to attest the data produced are protected at storage in a TPM ST33 and during execution within an ARM Cortex-A7 TrustZone. The designed solution is resilient, robust to software attacks and presents a high level of protection against side-channel attacks and fault injections. Furthermore, the real-time constraints of an embedded industrial application are respected. The integration of the security measures does not impact the performance in use.
Fichier principal
Vignette du fichier
paper_SUBMIT.pdf (1.17 Mo) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

cea-03498804 , version 1 (21-12-2021)

Identifiers

  • HAL Id : cea-03498804 , version 1

Cite

Dylan Paulin, Christine Hennebert, Thibault Franco-Rondisson, Romain Jayles, Thomas Loubier, et al.. HistoTrust: Attestation of a Data History based on off-the-shelf Secure Hardware Components. The 14th International Symposium on Foundations & Practice of Security, Dec 2021, Paris, France. pp.2. ⟨cea-03498804⟩
92 View
236 Download

Share

Gmail Facebook X LinkedIn More