Trusted Computing
Note: The information provided in this document is of a general nature and does not constitute legal advice. Moreover, it addresses only some issues in defamation law, and only under the law in Ontario, Canada. While the law of defamation in other common law jurisdictions (e.g., other provinces in Canada excluding Quebec, England, Australia, the USA) is based on similar principles, it can vary in important respects. If you have questions about how defamation law applies in a particular situation, you should consult a local lawyer.
Introduction
The term Trusted Computing refers to a controversial computer hardware and software design paradigm created by the Trusted Computing Group to make personal computers more secure by ensuring that they operate only within clearly defined parameters.
Trusted Computing is controversial because it transfers control of a computer away from the users to a trusted authority. In most cases the person or company who wrote the software is the trusted authority. Critics worry that the technology will harm computer users’ freedoms. Some predict that the technology will also pave the way for anti-competitive behavior in the software marketplace thus harming consumers in the long run.
Adoption of the technology is widespread throughout the personal computer industry with most of the major players now shipping personal computers with Trusted Computing capacity. Industry practice is to ship personal computers with Trusted Computing disabled, and the decision to enable the technology left to the consumer.
However, the concern remains that should the technology become widespread it will force all consumers to enable the Trusted Computing technology because without it the computer would be practically useless This would give members of the Trusted Computing Group a disproportionate amount of power over the marketplace and computer users because Trusted Computing puts the control over a user’s computer in the hands of the trusted authority.
F.A.Q.
- Can you give me a basic technical overview of Trusted Computing?
- Will Trusted Computing make my computer secure?
- Why is Trusted Computing controversial?
- How does Trusted Computing affect individual privacy?
- Does Trusted Computing restrict how I use my computer?
- How does Trusted Computing affect open-source software?
- Who favours Trusted Computing?
- What is the Trusted Computing Group?
- How does Trusted Computing relate to digital rights management (DRM)?
- Who opposes Trusted Computing?
- Will Trusted Computing harm innovation?
- Will Trusted Computing immunize me from spyware and viruses?
- Will Trusted Computing stop phishing?
- Does Microsoft Widows Vista employ Trusted Computing technology?
Can you give me a basic technical overview of Trusted Computing?
Trusted Computing encompasses four key technological concepts. They are Secure Input and Output, Memory Curtaining, Sealed Storage and Remote Attestation.
Secure input and output (secure I/O) creates a protected channel between the user and the software they are interacting with. The result is that malicious software injecting itself into this path could be identified and removed thus improving the security of the computer. For example, secure I/O would prevent a key logger program from intercepting the key strokes made to a banking website.
Memory curtaining provides full isolation of sensitive areas of memory from all software but the software intended to have access. Even the computer’s operating system does not have access to curtained memory locations. The result is very strong protection for sensitive information such as cryptographic keys.
Sealed storage protects information by encrypting it using a key derived from the combination of the hardware and software present on the computer. This results in the data being restricted to only a computer that has an identical hardware and software combination. The benefit of this technology is that a user’s data is more secure because it can only be viewed on the user’s computer. Even if a thief were to steal the hard drive of a computer the data would be encrypted and useless.
Remote attestation enables the user and third parties to determine what software is currently running on the computer. Through remote attestation the user’s computer generates a response to inquires regarding what software is currently running on it. This response is sent to the requesting party. The result is that the requesting party can avoid sending sensitive information to or receive commands from a comprimised or unsecured computer.
Will Trusted Computing make my computer secure?
Trusted Computing will make a user’s computer more secure from threats such as viruses and malware. It will secure the data on a user’s computer making it harder for unauthorized third parties to access it. It will also make the Internet a more secure environment for users because the remote attestation feature will allow users to determine the level of security present on other computers they are interacting with online.
However, it is important to remember that computer security is a relative concept. A computer is secure relative to a threat, whether viruses, hackers, or thieves. Computing implicitly identifies the threat as anything which causes the computer to behave in a way undesirable to the trusted authority. This threat includes the user as well. This is controversial because Trusted Computing treats the owner of the computer as untrustworthy from the perspective of the trusted authority, thus making the computer secure from the computer’s owner.
Why is Trusted Computing controversial?
Trusted Computing is controversial because:
(1) It gives too much control over the user’s computer to the trusted authority
Critics of Trusted Computing argue that too much control of a user’s computer is given to the trusted authority. Trusted Computing restricts the use of a user’s computer to purposes defined by the trusted authority rather than the user. The user does not have the option of overriding this control and will not be able to make decisions contrary to what the trusted authority allows.
(2) It will remove control from the user over the information they receive and could lead to undue censorship
Critics argue that Trusted Computing will be used to enforce stronger ditigal rights management (and proponents of the technology agree), which will remove the user’s control over the information they receive. They are also concerned that this technology could enable the trusted authority to enforce undue censorship because Trusted Computing will allow the trusted authority to decide whether a file is trusted or not, and if it is not then that file will not be allowed to operate on the user’s computer.
(3) It will cause users to lose their on-line anonymity
Critics argue that the ability for trusted computers to attest to their own unique configuration and identity will cause users to lose their anonymity on-line because third parties can request that the user’s computer attest to its identity. Once the identity of the computer is established it can be traced back to the user. Critics point out that the technology also causes the user to lose their anonymity during on-line interactions. They argue that this could have a chilling effect on political free speech, the ability of journalists to use anonymous sources, whistleblowing, political blogging and other areas where the public needs protection from retaliation through anonymity.
(4) It will lead to anti-competitive behavior from the trusted authority
Critics argue that Trusted Computing can be used by software designers who act as trusted authorities to force their existing customers to use their software over a competitor. Trusted Computing technology can prevent a user from accessing their existing data with an unapproved software application. It is also argued that this could lead to anti-competative effects in the software industry because consumers could be locked-in to applications that the software designer chooses to the exclusion of all others. Furthermore, the Trusted Computing authority could define competing software as untrusted and therefore it would not run on the user’s computer.
(5) It will force a user’s data to die along with the computer
Critics argue that Trusted Computing will prevent users from transfering their files when they switch to a new computer. The migration section of the TPM specification requires that it be impossible to move certain kinds of files except to a computer with the indentical make and model of security chip. If an old model of a chip is no longer produced it becomes impossible to move the data to a new machine at all; the data is forced to die along with the old computer.
How does Trusted Computing affect individual privacy?
A key feature of Trusted Computing is remote attestation. Remote attestation allows the user and others to detect changes to the user’s computer. Critics are concerned that Trusted Computing is technically capable of forcing tracking software onto users, with e.g. music files only enabled on machines that attest to informing an artist or record company every time the song is played. Remote attestation provides others with information about a user’s computer, which detracts from the level of privacy currently enjoyed by computer users. Trusted Computing proponents point out that online purchases and credit transactions could potentially be more secure as a result of the remote attestation capability.
Does Trusted Computing restrict how I use my computer?
Critics worry that the technologies underlying a computer employing a Trusted Computing platform will be used to fundamentally alter the way a user is able to use their computer.
Trusted Computing can be used to inhibit users from changing their software. Sealed storage will lock-in data to a particular piece of software and any software the trusted authority allows the data to be transferred to. This feature also limits the user to the functionality that the trusted authority makes available.
Remote attestation will remove a user’s control over the data they receive. Prior to any data being sent to the user’s computer the sending computer can request a certificate that states what software is operating on the user’s computer. If unapproved software is operating on the user’s computer then the sending computer can refuse to send the requested data. The trusted authority can prevent the user from performing unauthorized operations on the data because it can ensure that the user only has the software the trusted authority wants the user to have, and can prevent data from being sent to user if other software is present on the user’s computer.
Sealed storage will remove the user’s control over the data on the user’s computer by preventing users from moving their files to a new computer. Also, the migration section of the TPM specifications requires that it be impossible to move certain kinds of files except to a computer with an identical make and model of security chip.
How does Trusted Computing affect open-source software?
Trusted Computing could radically change the landscape of the software industry. Critics identify open-source software as being especially vulnerable to the changes brought about by Trusted Computing. For example, one critic states that:
The long term result [of Trusted Computing] will be that it will be impossible to use hardware and software that's not approved by the TCPA [Trusted Computing Platform Alliance]. Presumably there will be high costs to get this certification and that these would be too much for little and mid-range companies. Therefore open-source and freeware would be condemned to die, because without such a certification the software will simply not work. (See: http://www.youtube.com/watch?v=mLoIcdIu_Kk)
It will be difficult to reconcile the open source software with the Trusted Computing paradigm. In order for any software, whether it’s open source or not, to be able to run on a trusted platform it must be certified by the Trusted Computing Group (TCG), which was created out of the Trusted Computing Platform Alliance. The problem for open source software is that because it allows people to make changes to the software it will be difficult to obtain certification from the TCG for every instance of the software. Changing a piece of software causes the software to lose its TCG certification, which requires the software to be re-certified by the TCG before it can run on a trusted platform.
Who favours Trusted Computing?
Several major industry players are key supporters of Trusted Computing. In 1999, Compaq, HP, IBM, Intel, and Microsoft founded the Trusted Computing Platform Alliance. This organization evolved into the Trusted Computing Group.
According to their website “[t]he Trusted Computing Group (TCG) is a not-for-profit organization formed to develop, define, and promote open standards for hardware-enabled Trusted Computing and security technologies, including hardware building blocks and software interfaces, across multiple platforms, peripherals, and devices. TCG specifications will enable more secure computing environments without compromising functional integrity, privacy, or individual rights. The primary goal is to help users protect their information assets (data, passwords, keys, etc.) from compromise due to external software attack and physical theft”.
What is the Trusted Computing Group?
According to the TCG website “the Trusted Computing Group (TCG) is a not-for-profit organization formed to develop, define, and promote open standards for hardware-enabled Trusted Computing and security technologies, including hardware building blocks and software interfaces, across multiple platforms, peripherals, and devices. TCG specifications will enable more secure computing environments without compromising functional integrity, privacy, or individual rights. The primary goal is to help users protect their information assets (data, passwords, keys, etc.) from compromise due to external software attack and physical theft”.
Some observers comment that, “TCG's original major goal was the development of a Trusted Platform Module (TPM), a semiconductor intellectual property core or integrated circuit that conforms to the trusted platform module specification put forward by the Trusted Computing Group and is to be included with computers to enable trusted computing features. TCG-compliant functionality has since been integrated directly into certain mass-market chipsets.TCG also recently released the first version of their Trusted Network Connect (TNC) protocol specification, based on the principles of AAA, but adding the ability to authorize network clients on the basis of hardware configuration, BIOS, kernel version, and which updates that have been applied to the OS and anti-virus software, etc”. (See: http://www.nationmaster.com/encyclopedia/Trusted-Computing-Platform-Alliance)
How does Trusted Computing relate to digital rights management (DRM)?
According to some sources, the original motivation behind Trusted Computing was digital rights management. Trusted Computing can be used to prevent users from pirating software and other digital goods. Lenovo has already created a DRM system based on Trusted Computing technology.
Who opposes Trusted Computing?
Many prominent security experts have spoken out against Trusted Computing. Ross Anderson has written an FAQ and an article addressing many security and privacy concerns regarding Trusted Computing. Bruce Schneier has commented that Trusted Computing “will lead us down a road where our computers are no longer our computers, but are instead owned by a variety of factions and companies all looking for a piece of our wallet”.
Several organizations have also addressed concerns over Trusted Computing. The organization Against TCPA was created to advocate against Trusted Computing. Also, the Free Software Foundation has also spoken out against Trusted Computing.
Will Trusted Computing harm innovation?
If Trusted Computing becomes a ubiquitous technology then it could be harmful to innovation. Trusted Computing places the power to decide what software is allowed to run on the user’s computer in the hands of the trusted authority. This change in control over the computer could be used to thwart new and innovative computer programs by trusted authorities who will not allow those new programs to operate. This can be accomplished by defining competitors software as untrusted (i.e. not certifying the competitors software). This type of anti-competitive behavior is a serious concern for many experts in the field.
Will Trusted Computing immunize me from spyware and viruses?
Trusted Computing will be able to prevent any “unauthorized” program from operating. The power to authorize a program’s operation resides in the software designer. Therefore, Trusted Computing will be effective in preventing spyware and viruses that are not authorized by the software designer. However, Trusted Computing does not completely immunize the user from spyware and viruses because it is also possible that the software designer will authorize certain spyware and viruses to run on the user’s computer.
Please note the word spyware has a subjective meaning in this context.
Will Trusted Computing stop phishing?
A solution to the problem of phishing using a Trusted Computing platform has been suggested by Adil Alsaid and Chris J. Mitchell of the Information Security Group, Royal Holloway, at the University of London. The details of the solution are beyond the scope of this FAQ. To view their solution please click here.
Does Microsoft Widows Vista employ Trusted Computing technology?
Microsoft Windows Vista does employ Trusted Computing technology. According to Microsoft’s website “Windows Vista provides a set of services for applications that use TPM technologies. The Windows Vista TPM Services architecture will allow a rich, competitive environment to grow on top of TPM 1.2 technologies by assuring application-level sharing of the TPM, providing robust infrastructure for accessing the TPM, and enabling the entire Windows platform to take advantage of hardware-based security”.
Resources
Trusted Computing Group:
Trusted Computing Group, the Trusted Computing group website
Trusted Computing Group FAQ, the Trusted Computing group FAQ
Academic:
Trust Computing: Promise and Risk, a paper by EFF (Electronic Frontier Foundation) staff technologist Seth Schoen
The Trusted Systems Project, a part of the Global Information Society Project
Security Experts:
'Trusted Computing' Frequently Asked Questions — Anti-TC FAQ by Cambridge University security director and professor Ross Anderson.
"Why TCPA", from the IBM Watson Research - Global Security Analysis Lab
"TCPA Misinformation Rebuttal", from the IBM Watson Research - Global Security Analysis Lab - This white paper responds point by point to several papers and web pages which have criticized the TCPA chip based on misunderstandings and incorrect analysis.
The Trusted Systems Problem: Security Envelopes, Statistical Threat Analysis, and the Presumption of Innocence," Homeland Security - Trends and Controversies, IEEE Intelligent Systems, Vol. 20 No. 5, pp. 80-83 (Sept./Oct. 2005)
Schneier on Security, Bruce Schneier
Pro-Trusted Computing Articles:
Interesting Uses of Trusted Computing, a blog about potential uses of Trusted Computing
Microsoft and Trusted Computing:
Palladium and the TCPA, Cryto-Gram Newsletter, Bruce Schneier
Next-Generation Secure Computing Base (NGSCB) — Microsoft's Trusted Computing architecture
Speech Transcript - Craig Mundie, Trusted Computing Forum 2001
Articles on the negative effects of Trusted Computing:
EFF Comments on TCG Design, Implementation and Usage Principles, Seth Schoen, Electronic Frontier Foundation
TrouSerS - The open-source TCG Software Stack with a good FAQ , explaining possible problems you could have using a TPM.
Against-TCPA, a group advocating against Trusted Computing
LAFKON - A movie about Trusted Computing. Video opposed to Trusted Computing
Apple and Trusted Computing:
Apple to add Trusted Computing to the new kernel, an article about Apple Computer’s adoption of Trusted Computing
Apple on the Brink, John C. Dvorak
Ownership of Content and Trusted Computing:
Emerging Technologies of Ownership, Spike Gronim
Linux and Trusted Computing:
http://www.research.ibm.com/gsal/tcpa/TCFL-TPM_intro.pdf , from the IBM Watson Research - Global Security Analysis Lab
Trusted Linux Client , from the IBM Watson Research - Global Security Analysis Lab
Mobile Technology and Trusted Computing:
Trusted Mobile Platform - a set of specifications that define security features for mobile devices, jointly developed by IBM, Intel, and NTT DoCoMo
General Articles on Trusted Computing:
http://news.com.com/Hardware+security+sneaks+into+PCs/2100-7355_3-5619035.html
What price for 'trusted PC security'?, Bill Thompson, BBC Article