Delegating Verification for Remote Attestation Using TEE
Takashi Yagawa, Tadanori Teruya, Kuniyasu Suzaki, Hirotake Abe · 2024
Remote Attestation (RA) can check the status of target IoT devices and cloud platforms from remote locations. In RA, a user is presented with evidence by the target to evaluate its status, verified using a dedicated service or tool. However, the increase in IoT devices and the expansion of microservices make the responsiveness of RA challenging. As a solution, we propose the verification delegation to easily increase the number of verification services. The verification delegation enables guaranteed verification on any platform through the Trusted Execution Environment (TEE). This paper implements delegated verification service using Intel Software Guard Extensions (SGX) as TEE. The evaluations of the implementation show that our proposal is scalable and practical with excellent runtime performance.