VMCStore : a TPM-based trusted storage framework

This thesis introduces VMCStore, a framework for developing trusted storage applications on an untrusted server using a trusted platform module (TPM). The framework allows the server to provide trusted storage to a large number of clients, where each client may own and use several devices that may be offline at different times, and may not be able to communicate with each other, except through the untrusted server (over an untrusted network). The clients only trust the server's TPM; the server's BIOS, CPU, and OS are not assumed to be trusted. VMCStore draws on the ideas of virtual monotonic counters and validity proofs to provide tamper-evident storage, allowing the user to detect modifications to his data, as well as replay attacks. In particular, VMCStore uses TPM/J, a Java-based API for low-level access to the TPM, to create virtual monotonic counters using the monotonic counters and transport sessions of the TPM 1.2. VMCStore also provides a set of three log-based validation algorithms, which have been tested over PlanetLab and analyzed in this thesis. The VMCStore framework has been developed in a modular fashion, allowing the user to develop and test new applications and validation algorithms.

Department dc:contributor.department

Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science.

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2007

Author dc:creator

• Rhodes, Jonathan M., M. Eng. Massachusetts Institute of Technology

Advisor dc:contributor.advisor

• Srinivas Devadas and Luis Sarmenta.

• Electrical Engineering and Computer Science.

Statement dc:rights

• M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.

Licence dc:rights.uri

• http://dspace.mit.edu/handle/1721.1/7582

Language dc:language.iso

eng

Handle dc:identifier.uri

http://hdl.handle.net/1721.1/41551

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/41551