An integrated architecture for trusted computing for java enabled embedded devices

ABSTRACT

This paper presents a concept for enhancing mobile and embedded devices with trusted computing (TC)technology. It outlines a new architecture focusing on SUN's J2ME platform, including the design for a Mobile Trusted Module (MTM) to be used as a trusted computing base. The proposed architecture combines all software components required for accessing an MTM and shows how TC functionality can be provided for mobile applications. Moreover, different deployment scenarios of the architecture and its components are discussed. In order to prove that an implementation of the concept is feasible, a prototype of the architecture has been developed. For the design of the new architecture, special attention was turned to reusing currently existing technology and hardware rather than designing new hardware. By using already existing components, this paper also gives an answer to the question of how a mobile trusted-computing-enhanced system could be implemented with currently available technology

REFERENCES

• 1: Java Community Process JSR 218. Connected Device Configuration (CDC) 1.1. Specification available at: http://jcp.org/en/jsr/detail?id=218, 19 August 2005.
• 2: Kurt Dietrich. Secrure Signature Creation using the Java 2 Micro Edition on Mobile Devices. Master's thesis, Institute for Applied Information Processing and Communications, Technical University Graz, Austria, Inffeldgasse 16a, 8010 Graz, Austria, October 2003.
• 3: Trusted Computing Group Mobile Working Group. TCG Mobile Trusted Module Sepecification Version 1 rev. 1.0. Specification available online at: https://www.trustedcomputinggroup.org/specs/ mobilephone/tcg-mobile-trusted-module-1.0.pdf, 12 June 2007.
• 4: Trusted Computing Group TPM Working Group. TPM Main Part 2 Structures. Specification available at: https://www.trustedcomputinggroup.org/ specs/TPM/Main_Part2_Rev94.zip, 29 March 2006. Specification version 1.2 Level 2 Revision 94.
• 5: Trusted Computing Group TPM Working Group. TPM Main Part 3 Commands. Specification available online at: https://www.trustedcomputinggroup.org/ specs/TPM/Main_Part3_Rev94.zip, 29 March 2006. Specification version 1.2 Level 2 Revision 94.
• 6: Trusted Computing Group TSS Working Group. TCG Software Stack (TSS) Specification Version 1.2 Level 1. Specification available online at: https://www.trustedcomputinggroup.org/specs/TSS/TSS_Version_1.2_Level_1_FINAL.pdf, 6 January 2006. Part1: Commands and Structures.
• 7: International Organisation for Standardisation. ISO/IEC 7816-4, 2005. Part 4: Interindustry commands for interchange.
• 8: Trusted Computing for Java. Available online at: http://trustedjava.sourceforge.net/.
• 9: Yellin Frank Lindholm Tim. The Java Virtual Machine Specification.Second Edition. Available online at: http://java.sun.com/docs/books/jvms/ second_edition/html/VMSpecTOC.doc.html.
• 10: ARM Ltd. SecurCore SC200. Overview available at: http://www.arm.com/products/CPUs/SecurCore_SC200.html, 19 August 2005.
• 11: Sun Microsystems. Java Card Technology. Overview available at: http://java.sun.com/products/javacard/.
• 12: Sun Microsystems. Java Native Interface Specification. Available online at: http://java.sun.com/j2se/1.5.0/docs/guide/jni/spec/jniTOC.html.
• 13: Chamseddine Talhi Mourad Debbabi, Mohamed Saleh and Sami Zhioua. Security Evaluation of J2ME CLDC Embedded Java Platform. Journal of Object Technlogy, 5(2):125--154, March-April 2006.
• 14: SUN Developer Network. Java ME at a Glance. Specifications & Articles availablbe at: http://java.sun.com/javame/index.jsp.
• 15: Enrique C. Ortiz. Introduction to OTA Application Provisioning. Technical report, SUN Developer Network, November 2002. Article available at: http://developers.sun.com/mobility/midp/articles/ota/.
• 16: Siani Pearson. Trusted Computing Platforms, the Next Security Solution. Technical report, Trusted E-Services Laboratory, HP Laboratories Bristol HPL-2002-221, 5 November 2002.
• 17: SUN Community process JSR 139. J2ME(TM) Connected Limited Device Configuration (CLDC) Specification 1.1 Final Release. Specification available at: http://jcp.org/aboutJava/communityprocess/final/jsr139/index.html, 4 March 2004.
• 18: SUN Community process JSR 271. J2ME(TM) Mobile Information Device Profile (MIDP) 3.0. Draft available at: http://www.jcp.org/en/jsr/detail?id=271. Work in progress.
• 19: Müller Thomas Sarmenta Luis, Rhodes Jonathan. TPM/J Java-based API for the Trusted Platform Module (TPM). Available online at: http://projects.csail.mit.edu/tc/tpmj/, 3 April 2007.
• 20: Janne Uusilehto. How to establish mobile security. Available online at: http://www.mobilehandsetdesignline.com/showArticle.jhtml?printableArticle=true&articleId=196701831, 24 December 2006.

INDEX TERMS

Primary Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
      D.2.0 General
          Subjects: Protection mechanisms

Additional Classification:
  C. Computer Systems Organization
  C.3 SPECIAL-PURPOSE AND APPLICATION-BASED SYSTEMS
      Subjects: Smartcards

General Terms:
Security

Keywords:
J2ME, java 2 microedition, mobile security, mobile trusted module, trusted computing