Secure Open Systems for Protecting Privacy and Digital Services

This paper describes and analyzes a system architecture that enables consumers to access services and content from multiple providers without jeopardizing the privacy interests of consumers or the intellectual property rights of providers. In order to satisfy these highly desirable objectives, we argue for the necessity of a Trust Server that mediates the conferral and revocation of trust relationships between consumers and providers. The system also calls for the deployment of programmable security coprocessors at vulnerable sites requiring protection, namely at the Trust Server and at each consumer. We define the specific requirements of consumer-side Coprocessors, and their server-side counterparts denoted as Hardware Security Modules (HSMs). A single Coprocessor serves multiple providers by allocating to each of them a virtualized trusted computing environment for software execution and data manipulation. Bearing in mind that the tamper-resistance offered by Coprocessors is subjec...

• Type: Conference
• Year: 2001
• Where: CCS
• Authors: David W. Kravitz, Kim-Ee Yeoh, Nicol So
• Keywords: CCS 2001, Multiple Providers, Security Privacy, Single Coprocessor, Trust Server