Remote attestation of system integrity
AssigneeArm Limited
InventorsMilosch Meriac, Hugo John Martin Vincent, Shidhartha Das, Vasileios Tenentes
Life of this patent
Estimating the term…
Abstract
An apparatus and system for remote attestation of a power delivery network is disclosed. Embodiments of the disclosure enable remote attestation of the power delivery network by storing a trusted golden reference waveform in secure memory. The trusted golden reference waveform characterizes a power delivery network in response to a load generated on the power delivery network. A remote cloud server generates a server-generated remote attestation of the power delivery network by receiving an attestation packet from the power delivery network and verifying whether the attestation packet is consistent with an expected power delivery network identity.
Claims18
A method of remote attestation of a power delivery network (PDN), the method comprising:
- at a system-on-chip (SoC), coupled to a communications network, including a processor, a secure memory, one or more on-chip power supply rail noise monitoring sensors and a PDN configured to power, at least in part, the SoC:
- at random intervals:
- generating a reference load on the PDN,
- measuring, using the sensors, an induced reference noise on the PDN,
- determining, based on the measured induced reference noise, a trusted golden reference that characterizes a response of the PDN to the reference load, and
- storing, in the secure memory, the trusted golden reference with one or more associated environmental conditions;
- generating an applied load on the PDN;
- measuring, using the sensors, an induced applied noise on the PDN,
- determining, based on the measured induced applied noise, a dynamic-response property of the PDN to the applied load,
- in response to receiving a remote attestation request from a remote cloud server coupled to the communications network:
- comparing a current environmental condition to the environmental conditions associated with the trusted golden references stored in the secure memory,
- selecting a trusted golden reference with a matching environmental condition,
- generating an attestation packet based on the selected trusted golden reference waveform and the dynamic-response property, and
- sending the attestation packet to the remote cloud server;
- and
- at the remote cloud server:
- generating the remote attestation request,
- receiving the attestation packet from the SoC, and
- verifying whether the attestation packet is consistent with an expected PDN identity.
A system for remote attestation of a power delivery network (PDN), comprising:
- a system-on-chip (SoC), coupled to a communications network, including:
- a PDN configured to power, at least in part, the SoC,
- a secure memory configured to store a plurality of trusted golden reference waveforms and associated environmental conditions, the trusted golden reference waveforms characterizing the PDN in response to randomly-applied reference loads generated on the PDN,
- one or more on-chip power supply rail noise monitoring sensors configured to measure noise induced in the PDN in response to an applied load generated on the PDN, and
- a processor configured to:
- generate an applied load on the PDN;
- measure, using the sensors, an induced noise on the PDN,
- determine, based on the measured induced noise, a dynamic-response property of the PDN, and
- in response to receiving a remote attestation request;
- compare a current environmental condition to the environmental conditions associated with the trusted golden references stored in the secure memory,
- select a trusted golden reference with a matching environmental condition, and
- generate an attestation packet based on the selected trusted golden reference waveform and the dynamic-response property;
- and
- a remote cloud server, coupled to the communications network, configured to:
- generate the remote attestation request;
- receive the attestation packet from the SoC;
- and
- verify whether the attestation packet is consistent with an expected PDN identity.
Dependencies are inferred from the claim text.