You are previewing Trusted Computing Platforms: TCPA Technology in Context.
O'Reilly logo
Trusted Computing Platforms: TCPA Technology in Context

Book Description

TCPA: Building computing platforms upon a solid foundation of trust.

As businesses stake their very existence on the Internet, PCs, PDAs, and other key computing platforms, the trustworthiness of these platforms has become a vital concern. In response, the Trusted Computing Platform Alliance (TCPA) has delivered a complete specification for building trusted computing platforms atop trusted hardware. In Trusted Computing Platforms, leaders of the initiative illuminate TCPA for every systems developer and decision-maker. They place TCPA in context, outlining its goals, techniques, and powerful implications for the future.

  • What trusted computing platforms are, how they work, and what problems they will solve

  • Transforming standard platforms into trusted platforms cost-effectively

  • Scenarios for managers: TCPA applications in the security-focused business

  • Protected storage: how TCPA can ensure the confidentiality of stored data

  • Software integrity: ensuring that a system's software environment hasn't been tampered with

  • Trust mechanisms in a trusted platform: functional descriptions, advantages, and overhead

  • Trusted platforms in practice: TCPA for developers and technical professionals

  • How trusted platforms can be used to protect user privacy

  • The TCPA initiative: its history, status, and next steps forward

  • Backed by an extraordinary range of industry leaders, TCPA offers the first complete, cost-effective, and globally applicable solution for trusted computing. Whether you develop new systems or apply them in business or government, you need to understand this technology—and with this book, you will.

    Table of Contents

    1. Copyright
    2. Hewlett-Packard® Professional Books
    3. Foreword
    4. Preface
    5. About the Authors
    6. Introducing Trusted Platform Technology
      1. Trusted (Computing) Platforms: An Overview
        1. Summary of Trusted Platform Concepts
        2. Why Are Trusted Platforms 'Trusted'?
        3. The Value of Trusted Platforms
        4. The Main Features of Trusted Platforms
        5. When All Platforms Are Trusted Platforms
        6. Summary
      2. Usage Scenarios
        1. Straightforward Application of TCPA Trusted Platforms
        2. Speculative Use of Trusted Platforms
        3. Summary
      3. Key Components of Trusted Platform Technology
        1. Special Properties of Trusted Platforms
        2. Roots of Trust
        3. Trusted Platform Architectural Adaptations
        4. Integrity
        5. Identity
        6. Protected Storage
        7. Secure Boot and Authenticated Boot Processes
        8. Summary
    7. Trust Mechanisms in a Trusted Platform
      1. Access Control—Ownership, Enabling, and Authorization
        1. Enabling, Activating, and Owning a TPM
        2. Cryptographic Authorization
        3. Descriptions of TPM Capabilities
        4. Summary
      2. Platform Identification and Certification
        1. Platform Endorsement
        2. Attestation for Platform Identity Mechanisms
        3. Generating a Trusted Platform Module Identity
        4. Signing with TPM Identities
        5. TPM Capabilities
        6. Summary
      3. Integrity Recording, Reporting, and Secure Boot
        1. Platform Configuration Register (PCR)
        2. Data Integrity Registers
        3. TPM Capabilities
        4. Summary
      4. Protected Storage
        1. Concept of Protected Storage
        2. Functions of Protected Storage
        3. Summary
      5. Migration and Maintenance Mechanisms
        1. The Concepts of Migration and Maintenance
        2. Migration
        3. Maintenance
        4. TPM Capabilities
        5. Summary
      6. Conventional Security Functions and Assorted Host Functions
        1. Conventional Security Services
        2. Capabilities
        3. Auditing the TPM
        4. Summary
    8. Trusted Platforms In Practice
      1. Bringing a Trusted Platform to Life
        1. Building the Bases
        2. Setting Up the Platform
        3. Managing Authorization in the Key Hierarchy
        4. On-Going Platform Support
        5. Summary
      2. Building Trust
        1. In TCPA We Trust
        2. Trusting the Roots
        3. Trusting the Platform
        4. Summary
      3. Challenging a Trusted Platform
        1. Communication with a Trusted Platform
        2. Example
        3. Summary
    9. Trusted Platforms for Organizations and Individuals
      1. Corporate Deployment of Trusted Platforms
        1. Overall Architecture
        2. Deployment
        3. Summary
      2. The Trusted Platform in Front of You
        1. Establishing Users' Trust in Their Trusted Platforms
        2. Trusted Signing
        3. Multiple Smart Cards
        4. Dedicated Trusted States
        5. Summary
      3. Brief History of TCPA
        1. Evolution of TCPA
        2. About TCPA
        3. TCPA Specifications, Industry Standards, and Documentation
        4. Choice of Platform
        5. Further Information
      4. Trust Models and the E-Commerce Domain
        1. Social Models of Trust
        2. Trust in E-Commerce
        3. Benefits for a Company in Being Associated with Trust
        4. Conclusions
      5. Basic Cryptographic Primitives Used in the TCPA Specification
        1. Basic Security Services
        2. Basic Cryptographic Primitives
      6. Glossary
      7. References
    10. Index