Establishing Trusted and Secure Foundation for Device Management Using Open Source Software
Talkat Open Source Summit Europe 2023 · on Thursday, 2023-09-21· at 12:50· Room 3G (3JAUREGIA - Floor 3), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
End-to-end POC implements IETF RATS attestation on a CoreStone1000 reference platform with a secure enclave running Trusted Firmware‑M, producing JWT attestation tokens over TLS and integrating an off‑the‑shelf Veraison verifier and LwM2M stacks Wakaama + Leshan for device management. The system supports both passport and background‑check patterns: device creates evidence signed with provisioned keys, verifier appraises against provisioned endorsements, and the relying party receives a signed attestation result. Demo shows successful registration, provisioning of reference values, token verification and returned attestation verdicts.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:04IoT device management services
- 2:53Device attestation workflow
- 5:47IETF RATS architecture
- 7:30RATS interaction patterns
- 10:01Verizon attestation role
- 12:07Provisioning reference values
- 13:19Verification stage results
- 14:25Blishan Wakama components
- 16:17Prototype architecture
- 18:25Demo walkthrough
- 20:18Live demo execution
- 22:57Q&A
related talks
29mRemote Attestation of IoT devices using a discrete TPM 2.0
40mHas My IoT Device Been Hacked? Establishing Trust w/ Remote Attestation
01h 13mTutorial: Complete Platform Attestation: Remotely Verifying the Authenticity and Integrity of your Platform’s Hardware, Firmware, and Software
19mBoF: Simple Remote Attestation with Secure & Attested Communication Channels
24mHardware backed attestation in TLS
59mLayered Attestation of a Cross-Domain System
30mSupply Chain Security for IoT Devices
32mToward a standard device attestation token for device assignment