Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators

Raja Naeem Akram; Konstantinos Markantonakis; Keith Mayes

Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators

Raja Naeem Akram, Konstantinos Markantonakis, Keith Mayes

Computing Science

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

7 Citations (Scopus)

Abstract

User Centric Smart Card Ownership Model (UCOM) gives the ``freedom of choice'' of respective applications to the smart card users. The user-centric architecture requires a trusted entity to be present on the smart card to provide security assurance and validation to the requesting application providers. In this paper, we propose the inclusion of a trusted computing platform for smart cards that we refer as the Trusted Environment Execution Manager (TEM). This is followed by the rationale behind the changes to the traditional smart card architecture to accommodate the remote security assurance and validation mechanism. We propose an attestation protocol that provides an on-demand security validation of a smart card by its respective manufacturer. Finally, the attestation protocol is informally analysed, and its test implementation and performance measurements are presented.

Original language	English
Title of host publication	International Conference on Information and Communications Security (ICICS 2013)
Editors	S. Qing
Place of Publication	Beijing, China
Publisher	Springer International Publishing AG
Pages	151-166
Number of pages	16
Publication status	Published - 20 Nov 2013
Event	ICICS: International Conference on Information and Communications Security - Beijing, China Duration: 20 Nov 2013 → 22 Nov 2013 Conference number: 15th

Conference

Conference	ICICS
Abbreviated title	ICICS 2013
Country/Territory	China
City	Beijing
Period	20/11/13 → 22/11/13

Access to Document

https://link.springer.com/content/pdf/10.1007%2F978-3-319-02726-5_12.pdfLicence: Unspecified

Cite this

Akram, R. N., Markantonakis, K., & Mayes, K. (2013). Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators. In S. Qing (Ed.), International Conference on Information and Communications Security (ICICS 2013) (pp. 151-166). Springer International Publishing AG. https://link.springer.com/content/pdf/10.1007%2F978-3-319-02726-5_12.pdf

Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators. / Akram, Raja Naeem; Markantonakis, Konstantinos; Mayes, Keith.
International Conference on Information and Communications Security (ICICS 2013). ed. / S. Qing. Beijing, China: Springer International Publishing AG, 2013. p. 151-166.

Research output: Chapter in Book/Report/Conference proceeding › Published conference contribution

Akram, RN, Markantonakis, K & Mayes, K 2013, Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators. in S Qing (ed.), International Conference on Information and Communications Security (ICICS 2013). Springer International Publishing AG, Beijing, China, pp. 151-166, ICICS, Beijing, China, 20/11/13. <https://link.springer.com/content/pdf/10.1007%2F978-3-319-02726-5_12.pdf>

@inproceedings{bc7c69ccca8c4108aaccb481afe97727,

title = "Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators",

abstract = "User Centric Smart Card Ownership Model (UCOM) gives the ``freedom of choice'' of respective applications to the smart card users. The user-centric architecture requires a trusted entity to be present on the smart card to provide security assurance and validation to the requesting application providers. In this paper, we propose the inclusion of a trusted computing platform for smart cards that we refer as the Trusted Environment Execution Manager (TEM). This is followed by the rationale behind the changes to the traditional smart card architecture to accommodate the remote security assurance and validation mechanism. We propose an attestation protocol that provides an on-demand security validation of a smart card by its respective manufacturer. Finally, the attestation protocol is informally analysed, and its test implementation and performance measurements are presented.",

author = "Akram, {Raja Naeem} and Konstantinos Markantonakis and Keith Mayes",

year = "2013",

month = nov,

day = "20",

language = "English",

pages = "151--166",

editor = "Qing, {S. }",

booktitle = "International Conference on Information and Communications Security (ICICS 2013)",

publisher = "Springer International Publishing AG",

address = "Switzerland",

note = "ICICS : International Conference on Information and Communications Security, ICICS 2013 ; Conference date: 20-11-2013 Through 22-11-2013",

}

TY - GEN

T1 - Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators

AU - Akram, Raja Naeem

AU - Markantonakis, Konstantinos

AU - Mayes, Keith

N1 - Conference code: 15th

PY - 2013/11/20

Y1 - 2013/11/20

N2 - User Centric Smart Card Ownership Model (UCOM) gives the ``freedom of choice'' of respective applications to the smart card users. The user-centric architecture requires a trusted entity to be present on the smart card to provide security assurance and validation to the requesting application providers. In this paper, we propose the inclusion of a trusted computing platform for smart cards that we refer as the Trusted Environment Execution Manager (TEM). This is followed by the rationale behind the changes to the traditional smart card architecture to accommodate the remote security assurance and validation mechanism. We propose an attestation protocol that provides an on-demand security validation of a smart card by its respective manufacturer. Finally, the attestation protocol is informally analysed, and its test implementation and performance measurements are presented.

AB - User Centric Smart Card Ownership Model (UCOM) gives the ``freedom of choice'' of respective applications to the smart card users. The user-centric architecture requires a trusted entity to be present on the smart card to provide security assurance and validation to the requesting application providers. In this paper, we propose the inclusion of a trusted computing platform for smart cards that we refer as the Trusted Environment Execution Manager (TEM). This is followed by the rationale behind the changes to the traditional smart card architecture to accommodate the remote security assurance and validation mechanism. We propose an attestation protocol that provides an on-demand security validation of a smart card by its respective manufacturer. Finally, the attestation protocol is informally analysed, and its test implementation and performance measurements are presented.

UR - https://link.springer.com/chapter/10.1007/978-3-319-02726-5_12

M3 - Published conference contribution

SP - 151

EP - 166

BT - International Conference on Information and Communications Security (ICICS 2013)

A2 - Qing, S.

PB - Springer International Publishing AG

CY - Beijing, China

T2 - ICICS

Y2 - 20 November 2013 through 22 November 2013

ER -

Remote Attestation Mechanism for User Centric Smart Cards using Pseudorandom Number Generators

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this