Method and Apparatus for Providing Security to Devices

Abstract

Systems, methods, and apparatus are provided for generating verification data that may be used for validation of a wireless transmit-receive unit (WTRU). The verification data may be generated using a tree structure having protected registers, represented as root nodes, and component measurements, represented as leaf nodes. The verification data may be used to validate the WTRU. The validation may be performed using split-validation, which is a form of validation described that distributes validation tasks between two or more network entities. Subtree certification is also described, wherein a subtree of the tree structure may be certified by a third party.

What is claimed: 
     
         1 . A method for verifying the trustworthiness of one or more software or hardware components of a device, comprising:
 receiving from the device verification data generated by the device, wherein the verification data comprises at least a portion of a tree structure formed by the device, in which the roots of the tree structure contain verification data from one or more secure registers of the device, inner nodes of the tree structure are defined by a measurement log generated by the device, and the leaves of the tree structure store integrity measurement values from the measurement log generated by the device;   comparing the at least a portion of the tree structure received from the device to a corresponding reference tree structure to determine whether any of the received integrity measurement values match corresponding reference measurement values of the reference tree structure; and   verifying the trustworthiness of the one or more software or hardware components of the device based on a result of the comparison.