Methods and systems for anonymous hardware attestation
A method performing anonymous hardware attestation. A local software monitor is loaded at an originating device. The local software monitor may receive at least a command to execute at least a program and execute the at least a program by performing a series of authentications. Originating device activates a secure computing module located within originating device to generate a secure proof a device specific secret of the originating device. The originating device generates a digital signature conferring a credential on the local software module. The originating device deactivates the secure computing module upon generating the digital signature.
1. A system for anonymous hardware attestation, the system comprising:
an originating device, the originating device comprising
a secure computing module, the secure computing module including a device identifier circuit designed and configured to generate a secure proof of a device-specific secret of the originating device; and
an originating processor, the originating processor designed and configured to:
activate the secure computing module;
load a local software monitor, wherein the local software monitor is configured to:
receive at least a command to execute at least a program on the originating device;
generate at least a first cryptographic hash of the at least a command;
digitally sign the at least a first cryptographic hash of the at least command; and
execute the at least a program;
generate:
a digital signature conferring a credential to the local software module and signing a message including an identifier of the local software monitor, wherein generating further comprises generating a secure proof of the device-specific secret using the device identifier circuit; and
a verification datum of the device-specific secret; and
deactivate the secure computing module;
wherein the local software monitor is further configured to digitally sign the at least a first cryptographic hash by:
generating an anonymized signature set, wherein the anonymized signature set further comprises:
a modified identifier of the software monitor;
a modified signature, wherein:
the modified signature comprises a secure proof of the device-specific secret;
the modified signature signs a modified message referencing the modified first verification datum; and
the modified signature signs the at least a cryptographic hash; and
a modified verification datum based on the verification datum, wherein the modified verification datum verifies the modified signature.
2. The system of claim 1 , wherein the originating processor is configured to load the local software monitor at boot time.
3. The system of claim 1 , wherein the originating processor is configured to load the local software monitor using the secure computing module.
4. The system of claim 1 , wherein the secure proof further comprises a physically unclonable function.
5. The system of claim 1 , wherein the identifier of the local software monitor further comprises a verification datum linked with a local software monitor key.
6. The system of claim 1 , wherein the message includes a measurement of the local software monitor.
7. The system of claim 1 , wherein the local software monitor is further configured to perform delegation of authorization to a software application, where delegation further comprises generating a delegation signature.
8. The system of claim 7 , wherein the software application further comprises a remote software monitor, and the local software monitor is further configured to:
install the remote software monitor on a first remote device, wherein the remote software monitor is configured to:
receive at least a program to execute on the remote device;
generate at least a first cryptographic hash of the at least a program;
digitally sign the at least a first cryptographic hash of the at least a program; and
execute the at least a program.
9. The system of claim 8 , wherein the at least a first remote software monitor is further configured to install at least a second remote software monitor on at least a second remote device.
10. A method of anonymous hardware attestation, the method comprising:
activating, by an originating processor of an originating device, a secure computing module, the secure computing module including a device identifier circuit configured to generate a secure proof of a device specific secret of the originating device;
loading, by the originating processor, a local software monitor, wherein the local software monitor is configured to:
receive at least a command to execute at least a program on the originating device;
generate at least a first cryptographic hash of the at least a command;
digitally sign the at least a first cryptographic hash of the at least a command; and
execute the at least a program;
generating, by the originating processor:
a digital signature conferring a credential to the local software module and signing an identifier of the local software monitor, wherein generating further comprises generating a secure proof of the device-specific secret using the device identifier circuit; and
a verification datum of the device-specific secret; and
deactivating, by the originating processor, the secure computing module;
wherein the local software monitor is further configured to digitally sign the at least a first cryptographic hash by:
generating an anonymized signature set, wherein the anonymized signature set further comprises:
a modified identifier of the software monitor;
a modified signature, wherein:
the modified signature comprises a secure proof of the device-specific secret;
the modified signature signs a modified message referencing the modified first verification datum; and
the modified signature signs the at least a cryptographic hash; and
a modified verification datum based on the verification datum, wherein the modified verification datum verifies the modified signature.
11. The method of claim 10 , wherein loading the local software monitor occurs at boot time.
12. The system of claim 10 , loading the local software monitor further comprises loading the local software monitor using the secure computing module.
13. The system of claim 10 , wherein the secure proof further comprises a physically unclonable function.
14. The system of claim 10 , wherein the identifier of the local software monitor further comprises a verification datum linked with a local software monitor key.
15. The system of claim 10 , wherein the local software monitor is further configured to perform delegation of authorization to a software application, where delegation further comprises generating a delegation signature.
16. The method of claim 15 , wherein the software application further comprises a remote software monitor, and the local software monitor is further configured to:
install the remote software monitor on a first remote device, wherein the remote software monitor is configured to:
receive at least a program to execute on the remote device;
generate at least a first cryptographic hash of the at least a program;
digitally sign the at least a first cryptographic hash of the at least a program; and
execute the at least a program.
17. The method of claim 10 , wherein the at least a first remote software monitor is further configured to install at least a second remote software monitor on at least a second remote device.