UPM Institutional Repository

Mutual remote attestation in IPSec based VPN.


Abd Aziz, Norazah and Setapa, Sharipah and Udzir, Nur Izura (2012) Mutual remote attestation in IPSec based VPN. In: 3rd International Conference on Cryptology & Computer Security 2012 (Cryptology2012), 4-6 June 2012, Langkawi, Malaysia. (pp. 1-5). (Unpublished)


Secure communication between computer systems is normally established using secure tunnel technologies such as Internet Protocol Security (IPSec). IPSec protocol guarantees authenticity of communication and secure the data at each gateway but it does not provide any assurance on the entity authentication. So, it is important to make sure the trustworthiness of the remote party that already has a faithful system. Trusted Computing Group (TCG) has introduced a platform to solve this issue into the mainstream computer industry through their main approach called Trusted Platform Module (TPM). TPM is a security module which has been designed to store information of system events securely as well as the key component in the attestation realization. Trusted Computing Platform (TCP) provides a mechanism to supports attestation by its Platform Configuration Registers (PCR) which has become the integrity measurement of a platform. Attestation is a mechanism to provide remote assurance of the state of the hardware component running on a computing device. This paper, proposes an extension to the IPSec key exchange protocol by establishing properties-based attestation using key management service. An embedded attestation extension is provided in VPN communication such as IPSec protocol by establishing mutual properties based attestation using key management service (KeyMS) measurement value as properties. Hence, the proposed approach will protect both sender's and receiver's platforms integrity at their respective gateways

Download File

[img] PDF
ID 27710.pdf - Submitted Version
Restricted to Repository staff only

Download (297kB)

Additional Metadata

Item Type: Conference or Workshop Item (Paper)
Divisions: Faculty of Computer Science and Information Technology
Notes: Full text are available at Special Collection Division Office.
Keywords: Remote attestation; IPSec; Virtual Private Network (VPN).
Depositing User: Erni Suraya Abdul Aziz
Date Deposited: 07 May 2014 01:06
Last Modified: 18 Jun 2014 01:29
URI: http://psasir.upm.edu.my/id/eprint/27710
Statistic Details: View Download Statistic

Actions (login required)

View Item View Item