Apparatus and method for performing remote attestation by taking into account mobility
Provided are an apparatus and method for performing remote attestation by taking into account mobility. The method includes obtaining, by each node constituting a network, a remote attestation result value by performing self-remote attestation, obtaining, by each of the nodes, remote attestation result values from the other nodes by broadcasting the obtained remote attestation result value to at least one neighboring node, and monitoring, by each of the nodes, remote attestation of each of the nodes on the basis of the obtained remote attestation result values of the nodes.
1. A remote attestation method performed by taking into account mobility, comprising:
obtaining, by each node constituting a network, a remote attestation result value by performing self-remote attestation;
obtaining, by each of the nodes, remote attestation result values from other nodes by broadcasting the obtained remote attestation result value to at least one neighboring node; and
monitoring, by each of the nodes, remote attestation of each of the nodes based on the obtained remote attestation result values of the nodes, wherein in a snapshot state representing a final network state in which remote attestation result values from other nodes are obtained, each of the nodes updates its own network snapshot message using network snapshot messages of nodes whose integrity has been verified, wherein the obtaining of the remote attestation result value by performing the self-remote attestation comprises recording the remote attestation result value of each of the nodes in a predetermined network message using a Bloom filter.
2. The remote attestation method of claim 1 , wherein the obtaining of the remote attestation result values from the other nodes comprises obtaining remote attestation result values of the other nodes by broadcasting the network message to the at least one neighboring node and updating the network message using a preset consensus protocol and a network message received from the at least one neighboring node.
3. The remote attestation method of claim 2 , wherein the obtaining of the remote attestation result values from the other nodes comprises updating, by each of the nodes, the network message by combining a remote attestation result value recorded in the network message with a remote attestation result value recorded in the received network message.
4. The remote attestation method of claim 2 , wherein the consensus protocol comprises a symmetric key-based consensus protocol or an asymmetric key-based consensus protocol.
5. The remote attestation method of claim 2 , wherein the obtaining of the remote attestation result values from the other nodes comprises: verifying, by each of the nodes, integrity of each of the nodes using the consensus protocol; updating the network message with a network message of at least one node with verified integrity; and obtaining remote attestation result values of the other nodes through the updated network message.
6. The remote attestation method of claim 5 , wherein the verifying of the integrity of each of the nodes comprises: starting, by the nodes, generation of tokens by generating commitment values; generating the tokens by integrating identifiers and commitment values corresponding to neighboring nodes of the nodes; and verifying integrity of the nodes participating in the generation of the tokens using the tokens.
7. The remote attestation method of claim 6 , wherein the verifying of the integrity of the nodes participating in the generation of the tokens comprises: storing, by nodes participating in the generation of a token among the tokens, signature values corresponding to the nodes in the token; integrating the signature values corresponding to the nodes; and verifying integrity of the nodes participating in the generation of the tokens by verifying integrated commitment values and the integrated signature values.
8. The remote attestation method of claim 7 , wherein the commitment values (R i ) are generated to correspond to R i =g{circumflex over ( )}{r i } with respect to a group G with a prime order q, a generator g of the group G, and a secret random number r i .
9. The remote attestation method of claim 8 , wherein the signature values (Si) are generated to correspond to s i= r i +cx i with respect to a signature private key x i among pairs of signature keys, the secret random number r i , and a hash value c, and wherein the hash value c is generated to correspond to the integrated commitment values and a message requesting an electronic signature.
10. The remote attestation method of claim 9 , wherein the verifying of the integrated commitment values and the integrated signature values comprises using a common public key obtained by integrating signature public keys among the pairs of signature keys.
11. A remote attestation method performed by taking into account mobility, comprising:
performing, by each node constituting a network, self-remote attestation to obtain a remote attestation result value and recording the obtained remote attestation result value in a network message of the node; receiving, by each of the nodes, a network message broadcast from at least one neighboring node; updating by each of the nodes the network message using the received network message and a preset consensus protocol; and monitoring, by each of the nodes, remote attestation of the nodes constituting the network based on a remote attestation result value updated in the network message, wherein in a snapshot state representing a final network state in which remote attestation result values from other nodes are obtained, each of the nodes updates its own network snapshot message using network snapshot messages of nodes whose integrity has been verified, wherein the recording of the obtained remote attestation result value in the network message comprises recording the obtained remote attestation result value in the network message using a Bloom filter.
12. The remote attestation method of claim 11 , wherein the updating of the network message comprises: verifying integrity of each of the nodes using the consensus protocol; and updating the network message with a network message of a node with verified integrity.
13. The remote attestation method of claim 12 , wherein the verifying of the integrity of each of the nodes comprises: starting, by the nodes, generation of tokens by generating commitment values; generating the tokens by integrating identifiers and commitment values corresponding to neighboring nodes of the nodes; and verifying integrity of the nodes participating in the generation of the tokens using the tokens.
14. The remote attestation method of claim 13 , wherein the verifying of the integrity of the nodes participating in the generation of the tokens comprises: storing, by nodes participating in the generation of a token among the tokens, signature values corresponding to the nodes in the token; integrating the signature values corresponding to the nodes; and verifying integrity of the nodes participating in the generation of the tokens by verifying integrated commitment values and the integrated signature values.
15. A remote attestation apparatus for performing remote attestation by taking into account mobility, comprising: a processor configured to perform self-remote attestation to obtain a remote attestation result value and record the obtained remote attestation result value in a network message of the self-verifier; and a receiver configured to receive a network message broadcast from at least one neighboring node, wherein the processor is further configured to update the network message using the received network message and a preset consensus protocol and to monitor remote attestation of nodes constituting a network based on a remote attestation result value updated in the network message, wherein in a snapshot state representing a final network state in which remote attestation result values from other nodes are obtained, each of the nodes updates its own network snapshot message using network snapshot messages of nodes whose integrity has been verified, wherein the processor records the obtained remote attestation result value in the network message using a Bloom filter.
16. The remote attestation apparatus of claim 15 , wherein the processor verifies integrity of each of the nodes using the consensus protocol and updates the network message with a network message of a node with verified integrity.
17. The remote attestation apparatus of claim 16 , wherein the processor is further configured to: start generation of tokens by generating commitment values of the nodes; generate the tokens by integrating identifiers and commitment values corresponding to neighboring nodes of the nodes; store signature values corresponding to nodes participating in the generation of a token among the tokens in the token; integrate the signature values corresponding to the nodes; and verify integrity of the nodes participating in the generation of the tokens by verifying the integrated commitment values and the integrated signature values.