Method and apparatus for providing security to devices

In a wireless transmit-receive unit (WTRU) comprising one or more components and having a secure environment, a method for generating verification data using a number of secure registers within the secure environment, the method comprising:

• obtaining a value representing a measurement of a software or hardware component of the WTRU;
• generating verification data from the measurement value and storing the verification data in one of the registers within the secure environment;
• storing the measurement value at a leaf node in a tree structure;
• and
• performing one or more extend operations within the secure environment to extend the value stored in the leaf node to a root node of said tree structure to enable validation of the component of the WTRU through traversal of the tree structure from the root node to the leaf node, and wherein said root node comprises the data in the secure register in which the generated verification data is stored,
• wherein said tree structure comprises at least one inner node on a path from said leaf node to said root node, and wherein said at least one inner node forms a root of a subtree of said tree structure, and wherein said extending the value stored in the leaf node to said root node of the tree structure further comprises:
• performing one or more extend operations to extend the value stored at said leaf node to said at least one inner node, wherein said at least one inner node comprises another secure register within said secure environment;
• and
• performing one or more other extend operations to extend the value from said at least one inner node to said root node of said tree structure.

A processor-implemented method for validating tree-formed verification data generated by a wireless transmit/receive unit (WTRU), wherein the tree-formed verification data comprises verification data elements, a measurement log (ML) and component measurement values organized into a tree structure stored in a computer-readable storage medium, wherein the component measurement values comprise measurements of software or hardware components of the WTRU, wherein the verification data elements are generated from the component measurement values, and wherein the verification data elements define root nodes of the tree structure, the ML defines inner nodes of the tree structure, and the component measurement values define leaf nodes of the tree structure, the method comprising:

• receiving, by a processor, the tree-formed verification data organized in said tree structure;
• starting from a verification data element at a root of the received tree-formed verification data, the processor traversing the tree structure;
• as part of traversing the tree structure, the processor comparing values at branching nodes and child nodes of the branching nodes of the received tree structure to values at the same node positions of a reference tree;
• and
• the processor determining whether to validate the WTRU or an individual component of the WTRU based on said comparing of node values.

A method for certifying a node value of a measurement log (ML) generated by a wireless transmit/receive unit (WTRU), wherein the values of the ML are stored as nodes of a tree structure comprising root nodes, inner nodes and leaf nodes, the method comprising:

• receiving an attestation package that indicates a node value to be certified by a subtree certificate authority (SCA);
• recognizing the node value as a node value that can be certified by the SCA;
• creating a manifest associated with the node value, wherein the manifest includes validation information associated with the node value;
• creating a certificate for the node value configured to bind the validation information to a secure environment of the WTRU;
• and
• issuing the certificate with the manifest, wherein the certificate and manifest are provided to the secure environment of the WTRU to enable the WTRU to store the certificate in its ML and enable validation of a software or hardware component of the WTRU through traversal of the tree structure from the root node to the leaf node.