Remote attestation is one of the ways to verify the state of an untrusted device. Earlier research has attempted remote verification of a devices' state using hardware, software, or hybrid approaches. Majority of them have used Attestation Key as a hardware root of trust, which does not detect hardware modification or counterfeit issues. In addition, they do not have a secure communication channel between verifier and prover, which makes them susceptible to modern security attacks. This paper presents SEDAT, a novel methodology for remote attestation of the device via a security enhanced communication channel. SEDAT performs hardware, firmware, and software attestation. SEDAT enhances the communication protocol security between verifier and prover by using the Single Packet Authorization (SPA) technique, which provides replay and Denial of Service (DoS) protection. SEDAT provides a way for verifier to get on-demand device integrity and authenticity status via a secure channel. It also enables the verifier to detect counterfeit hardware, change in firmware, and software code on the device. SEDAT validates the manufacturers` root CA certificate, platform certificate, endorsement certificate (EK), and attributes certificates to perform platform hardware attestation. SEDAT is the first known tool that represents firmware, and Integrity Measurement Authority (IMA) event logs in the Canonical Event Logs (CEL) format (recommended by Trusted Computing Group). SEDAT is the first implementation, to the best of our knowledge, that showcases end to end hardware, firmware, and software remote attestation using Trusted Platform Module (TPM2.0) which is resilient to DoS and replay attacks. SEDAT is the first remote verifier that is capable of retrieving a TPM2.0 quote from prover and validate it after regeneration, using a software TPM2.0 quote check.

中文翻译：

---

SEDAT：TPM2.0增强安全性的设备认证

远程证明是验证不受信任设备状态的方法之一。较早的研究尝试使用硬件，软件或混合方法对设备状态进行远程验证。他们中的大多数已经将证明密钥用作硬件信任根，它不能检测到硬件修改或伪造问题。此外，它们在验证者和证明者之间没有安全的通信通道，这使其容易受到现代安全攻击的影响。本文介绍了SEDAT，这是一种通过安全性增强的通信通道对设备进行远程认证的新颖方法。SEDAT执行硬件，固件和软件证明。SEDAT通过使用单数据包授权（SPA）技术来增强验证者与证明者之间的通信协议安全性，提供重播和拒绝服务（DoS）保护。SEDAT为验证者提供了一种通过安全通道获取按需设备完整性和真实性状态的方法。它还使验证者能够检测伪造的硬件，固件的更改以及设备上的软件代码。SEDAT会验证制造商的根CA证书，平台证书，背书证书（EK）以及属性证书，以执行平台硬件证明。SEDAT是第一个已知的代表固件的工具，并且完整性度量机构（IMA）事件日志采用标准事件日志（CEL）格式（由Trusted Computing Group推荐）。就我们所知，SEDAT是第一个实现，它展示了使用可信平台模块（TPM2）的端到端硬件，固件和软件远程认证。0）可以抵御DoS和重放攻击。SEDAT是第一个能够从证明者那里检索TPM2.0报价并在重新生成之后使用软件TPM2.0报价检查对其进行验证的远程验证器。