Code Verification Based on TPM Solutions for Internet of Things Platforms

Abstract

Today’s Internet of Things (IoT) is achieving more and more importance, since networks of physical objects embedded with electronic components, software and sensors are gaining popularity. The connectivity of such objects becomes crucial for the services and functionalities provided by the Internet of Things, which can be used for a great range of purposes: a network of cars sharing traffic information, a network of medical services, etc. more applications require the use of embedded code. This code usually exchanged in a pre-compiled form (byte code), can be naturally the product of the compilation of a source program written in a given language (smart cards,), but can also be of a unknown source (network games, hackers,). It is therefore appropriate, before running it, to make sure it is free of errors and that its execution on the host platform will not affect the proper functioning, both in terms of the calculation time and the level of the memory resources used. We are interested here in different techniques and methods to specify and to verify the veracity of the code exchanged between the different machines, In this case, we have to focus in two different sources of action: Device authentication: to ensure that any device can be replaced by a fake one and Software state attestation: to ensure that the current software state matches the system state. The way to address this issue is through trusted element-based TPM solutions.