Systems, Methods and Apparatuses for Device Attestation Based on Speed of Computation

A computing device for attesting a communication partner, comprising:

• a communication port;
• and
• a processor configured to:
• obtain a nonce;
• generate an attestation request including the nonce as an initial value;
• send the generated attestation request to the communication partner via the communication port;
• receive a verification value returned from the communication partner, wherein the verification value is a computation result of a predefined function performed on the communication partner taking the nonce as an initial value;
• receive at least a first and a second intermediate results of computation of the predefined function on the communication partner;
• determine whether the verification value is received within a predetermined time threshold;
• determine whether the first intermediate result is equal to a first expected value by performing the predefined function taking the nonce as a first initial value;
• determine whether the second intermediate result is equal to a second expected value by performing the predefined function taking the first intermediate result as a second initial value;
• and
• determine that the communication partner is a trusted device by determining the verification value is received within the predetermined time threshold, the first intermediate result is equal to the first expected value and the second intermediate result is equal to the second expected value.

A computer-implemented method comprising:

• generating, by a computer, an attestation request including a nonce as an initial value;
• transmitting, by a communication port of the computer, the generated attestation request to a communication partner;
• receiving, by the computer, a verification value from the communication partner, wherein the verification value is a computation result of a predefined function performed on the communication partner taking the nonce as an initial value;
• receiving, by the computer, at least a first and a second intermediate results of computation of the predefined function on the communication partner;
• determining, by the computer, whether the verification value is received within a predetermined time threshold;
• determining, by the computer, whether the first intermediate result is equal to a first expected value by preforming the predefined function taking the nonce as a first initial value;
• determining, by the computer, whether the second intermediate result is equal to a second expected value by performing the predefined function taking the first intermediate result as a second initial value;
• and
• determining, by the computer, that the communication partner is a trusted device by determining the verification value is received within the predetermined time threshold, the first intermediate result is equal to the first expected value and the second intermediate result is equal to the second expected value.