 |
The RAS RA device subsystem verifies the integrity of itself and delivers verification information to the RAS RA server.
It contains an application that executes remote attestation using the trusted device element and registers itself with the RAS RA server during initial boot.
It periodically receives remote verification requests and performs integrity verification.
The main functions are to generate individual or integrated verification information for devices through remote attestation agents and the integrated verification information is transmitted as a signed verification value using the device security element before being sent to the RAS RA server subsystem.
It obtains integrity verification values for files existing in the monitoring directory stored in the configuration file.
It also calculates a hash value for device integrity using a trusted device element-based interface. Finally, it creates a measurement list and chained hash value (using SHA256 Hash function) |
IEEE/ICACT20220401 Slide.09
[Big Slide]