Light-Weight Security Protocol and Data Model for Chip-to-Chip Zero-Trust

被引：2

作者：

Ahmed, Ashfaq ^{[1
]}

Shoufan, Abdulhadi ^{[1
,2
]}

Belwafi, Kais ^{[1
]}

机构：

[1] Khalifa Univ, Ctr Cyber Phys Syst C2PS, Abu Dhabi, U Arab Emirates

[2] Khalifa Univ, Dept Elect Engn & Comp Sci, Abu Dhabi, U Arab Emirates

来源：

IEEE ACCESS | 2023年 / 11卷

关键词：

Secure protocol and data model (SPDM); automatic verification of internet security protocols and applications (AVISPA); secure protocol animator (SPAN); formal verification (FV); AUTHENTICATION; DESIGN;

D O I：

10.1109/ACCESS.2023.3285630

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

The semiconductor supply chain is vulnerable to multiple security attacks, such as hardware Trojan injection, intellectual property theft, and overproduction. The notion of zero-trust (ZT) - never trust, always verify - offers a promising opportunity for chip security by authenticating integrated circuits (ICs) when they are connected to critical computing systems. Before exchanging any data, the system establishes trust with the chip using industry security protocols. In this paper, we propose using the secure protocol and data model (SPDM) to establish chip-to-chip (C2C)-ZT communications. Furthermore, we present formal models for this solution and verify these models using state-of-the-art formal verification tools. The results show that the SPDM meets the requirements of the ZT architecture and can be used as a foundation for secure C2C interconnection.

引用

页码：60335 / 60348

页数：14