Secure Device Identity Tutorial

Borza/Vie ga Secure Device Identity Tutor ialSecure Device Identity TutorialMik e Bo rzaJohn Viegawith Charles QiK aren Zelenko2005-07-18 Page 1Borza/Vie ga Secure Device Identity Tutor ialA genda● Secure Device Identity – 100,000 foot view● The 5 criteria● The 10,000 foot view● Related technologies● Related presentations–Charles Qi, Broadcom Broadsafe HSM–Karen Zelenko – Phoe nix Technologies security modules2005-07-18 Page 2Borza/Vie ga Secure Device Identity Tutor ialThe 100,000 Fo ot View2005-07-18 Page 3Borza/Vie ga Secure Device Identity Tutor ialWhat is it?● Unique per-device identifiers –M ethod or methods for authenticating that the device is uniquely bound to that identifier–M anufacturing ID may be augmented with Locally Significant Ide ntity (LSID )● What is a device?– “Anything with an identity” – Nor m Finn ● Distributed trust model, no central registry–no extra administration or cost within IEEE to implement2005-07-18 Page 4Borza/Vie ga Secure Device Identity Tutor ialWhy is it needed?● No standard ways to identify devices across network architectures● MA C addresses are not sufficient–M ultiple per device–Reconfigurable–Not cryptographically bound● Device identity is important for completing chains of trust–Closes a significant window of vulnerability2005-07-18 Page 5Borza/Vie ga Secure Device Identity Tutor ialWhere will it be used?● Network equipment provisioning● Identification of devices joining a ...