DOCSLIB.ORG

Multiple Stakeholder Model Revision 3.40

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Multiple Stakeholder Model Revision 3.40 R E Multiple Stakeholder Model F Published E Family “2.0” R Level 00 Revision 3.40 2 May 2016 E N C Contact: [email protected] E TCG PUBLISHED Copyright © TCG 2012-2016 TCG Published - Multiple Stakeholder Model Copyright TCG Copyright ©2012-2016 Trusted Computing Group, Incorporated. Disclaimer THIS REFERENCE DOCUMENT IS PROVIDED "AS IS" WITH NO WARRANTIES WHATSOEVER, INCLUDING ANY WARRANTY OF MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR ANY PARTICULAR PURPOSE, OR ANY WARRANTY OTHERWISE ARISING OUT OF ANY PROPOSAL, WHITE PAPER, OR SAMPLE. Without limitation, TCG disclaims all liability, including liability for infringement of any proprietary rights, relating to use of information in this reference document, and TCG disclaims all liability for cost of procurement of substitute goods or services, lost profits, loss of use, loss of data or any incidental, consequential, direct, indirect, or special damages, whether under contract, tort, warranty or otherwise, arising in any way out of use or reliance upon this document or any information herein. No license, express or implied, by estoppel or otherwise, to any TCG or TCG member intellectual property rights is granted herein. Contact the Trusted Computing Group at www.trustedcomputinggroup.org for information on TCG licensing through membership agreements. Any marks and brands contained herein are the property of their respective owners. Page ii TCG PUBLISHED Family “2.0” 2 May 2016 Copyright © TCG 2012-2016 Level 00 Revision 3.40 Published- Multiple Stakeholder Model Copyright TCG Acknowledgments The TCG wishes to thank all those who contributed to this reference document. Ronald Aigner Microsoft Bo Bjerrum Intel Corporation Alec Brusilovsky InterDigital Communications, LLC David Challener Johns Hopkins University, Applied Physics Lab Michael Chan Samsun Semiconductor Inc. / Qualcomm Inc. Cedric Colnot NXP Semiconductors Carlin Covey NXP Semiconductors Jan-Erik Ekberg Nokia Paul England Microsoft Andreas Fuchs Fraunhofer Institute for Secure Information Technology (SIT) Jon Gaeter ARM Ltd. / Trustonic Ltd Steve Hanna Infineon Technologies North America Corp. Laszlo Hars The Boeing Company Carey Huscroft HP Inc. Bill Jacobs Cisco Greg Kazmierczak Wave Systems Seigo Kotani Fujitsu Limited Sung Lee Intel Corporation Ira McDonald High North Inc. Kathleen McGill Johns Hopkins University, Applied Physics Lab John Mersh ARM Ltd. Hadi Nahari NVIDIA Corp Ken Nicolson Panasonic Carlton Northern The MITRE Corporation Niall O'Donoghue Microsoft Michael Peck The MITRE Corporation Gilles Peskine Trustonic Ltd Stanley Potter United States Government Graeme Proudler HP Inc. Emily Ratliff Advanced Micro Devices, Inc. Joshua Schiffman Advanced Micro Devices, Inc. Ariel Segall The MITRE Corporation Hervé Sibert STMicroelectronics Sylvain Trosset Trustonic Ltd Janne Uusilehto Microsoft Paul Waller CESG Monty Wiseman Intel Corporation David Wooten Microsoft Esteban Yepez Sandia National Laboratories Family “2.0” TCG PUBLISHED Page iii Level 00 Revision 3.40 Copyright © TCG 2012-2016 2 May 2016 Published - Multiple Stakeholder Model Copyright TCG Table of Contents 1 Scope and Audience ............................................................................................................................. 1 1.1 References ...................................................................................................................................... 1 2 Basic Definitions .................................................................................................................................... 5 3 Acronyms............................................................................................................................................... 9 4 Introduction .......................................................................................................................................... 11 4.1 Assumptions ................................................................................................................................. 11 4.2 Key Concepts and Technologies .................................................................................................. 11 4.2.1 Roots of Trust ....................................................................................................................... 11 4.2.2 Transitive Trust ..................................................................................................................... 11 4.2.3 Secure Boot .......................................................................................................................... 12 4.2.4 Measured Boot ..................................................................................................................... 12 4.2.5 Trusted Platform Module ...................................................................................................... 12 4.2.6 TPM Mobile .......................................................................................................................... 12 4.2.7 Trusted Network Communication (TNC) .............................................................................. 12 4.2.8 Protected Environment ......................................................................................................... 12 4.2.9 Trusted Path ......................................................................................................................... 13 4.2.10 Trust Assertions ................................................................................................................... 13 5 Use Cases ........................................................................................................................................... 14 5.1 Bring Your Own Device (BYOD) ................................................................................................... 14 5.2 Financial Services ......................................................................................................................... 14 5.3 Health Monitoring Services ........................................................................................................... 15 6 Recommendations .............................................................................................................................. 16 6.1 Recommended Capabilities .......................................................................................................... 16 6.1.1 Integrity Protection of Trusted Shared Components ............................................................ 16 6.1.2 Isolation from Other Stakeholders ........................................................................................ 16 6.1.3 Trusted Path ......................................................................................................................... 16 6.1.4 Key Storage .......................................................................................................................... 16 6.1.5 Authentication of End Users and Device .............................................................................. 17 6.1.6 Authentication of Remote Entities ........................................................................................ 17 6.1.7 Authorization ........................................................................................................................ 17 6.1.8 Policy-based Access Control ............................................................................................... 17 6.1.9 Data Encryption .................................................................................................................... 17 6.1.10 Attestation of Trusted Shared Components ......................................................................... 18 6.2 Advanced Capabilities .................................................................................................................. 18 6.2.1 Audit of System Events ........................................................................................................ 18 6.2.2 Audit of Stakeholder Events ................................................................................................. 18 6.2.3 Active Environment Indication .............................................................................................. 18 7 Implementation Alternatives ................................................................................................................ 19 7.1 Single TPM ................................................................................................................................... 19 7.2 Multiple TPMs ............................................................................................................................... 22 7.3 Virtualization ................................................................................................................................. 24 8 Threats and Mitigations ....................................................................................................................... 27 Page iv TCG PUBLISHED Family “2.0” 2 May 2016 Copyright © TCG 2012-2016 Level 00 Revision 3.40 Published- Multiple Stakeholder Model Copyright TCG List of Figures Figure 1 – Notional diagram of a Single TPM MSM implementation .................................................................... 19 Figure 2 – Notional diagram of a Multiple TPM MSM implementation ................................................................ 22 Figure 3 – Notional diagram of a virtualized MSM
Load more

Recommended publications
  • Beyond BIOS Developing with the Unified Extensible Firmware Interface
    Digital Edition Digital Editions of selected Intel Press books are in addition to and complement the printed books. Click the icon to access information on other essential books for Developers and IT Professionals Visit our website at www.intel.com/intelpress Beyond BIOS Developing with the Unified Extensible Firmware Interface Second Edition Vincent Zimmer Michael Rothman Suresh Marisetty Copyright © 2010 Intel Corporation. All rights reserved. ISBN 13 978-1-934053-29-4 This publication is designed to provide accurate and authoritative information in regard to the subject matter covered. It is sold with the understanding that the publisher is not engaged in professional services. If professional advice or other expert assistance is required, the services of a competent professional person should be sought. Intel Corporation may have patents or pending patent applications, trademarks, copyrights, or other intellectual property rights that relate to the presented subject matter. The furnishing of documents and other materials and information does not provide any license, express or implied, by estoppel or otherwise, to any such patents, trademarks, copyrights, or other intellectual property rights. Intel may make changes to specifications, product descriptions, and plans at any time, without notice. Fictitious names of companies, products, people, characters, and/or data mentioned herein are not intended to represent any real individual, company, product, or event. Intel products are not intended for use in medical, life saving, life sustaining, critical control or safety systems, or in nuclear facility applications. Intel, the Intel logo, Celeron, Intel Centrino, Intel NetBurst, Intel Xeon, Itanium, Pentium, MMX, and VTune are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.
    [Show full text]
  • Uefi وبعض أنظمة Bios Uefi واجهة الربنامج الثابت املوحدة والقابلة للتمديد
    - جدول أقسامGUID GUID Partition Table جدول أقسام )أو تقسيم( يستخدم املعرفات الفريدة العميمة "! G % تعري. و-يي, ا+قسام *( ال)'ي& املقسم % أ$#مة !0/ و2ع1 أ$#مة 45!3 UEFI واج=ة ال>$ا;: ال9ا82 امل)7دة والقا62ة ل6تمديد مس جد? % ;<رم ّو@B @AA دة 'Cتمرب/أي6)ل DE@F2 " F جدول أقسام GUID *باIة *H تخGيط )أو تقسيم( جدول أقسام ;عياJI *( أج=,ة التخ,يH الفي,ياKيةM9; L ا+قراN الثا2تةL أو أقراN الحالة الC6OةPQ Lا التخGيط يستخدم املعرR الفريد العميم U@TS % متيي, ا+قسام وأ$)ا*هاL وXIم أ$W ج,H; V ;عياI واج=ة ال>نا;: الثا82 امل)حدة والقا62ة ل6تمديد !U ZD S YL /0 )املق^[ ;H ;\تد] h _`abc /0! 0defgبديM ل6\ظام التق6يدJ 45!3( $ظام Hlm GPj ا'تخدا;W أيضا % 2ع1 أ$#مة 45!3 بسnC ;حدو?ية جدول أقسام Lo3p الذJ يستخدم 82qTD فقط % تخ,يH ;ع6)مات ال<rم و*ناويr7 v; us3t Hم القGاw التق6يدqx@D Jبايu8 ;ع#م أ$#مة التشyيM تد*م P\; LGPj العام LDE@E 2ع1 ا+$#مة ;M9 ما{ أوu|} ومايكرو')ف8 ويندو~ )x86( تد*م فقط اإلقالH; w أقسام GPj % أ$#مة !L /0!B/0 2ي\ام ;ع#م ت)~يعات لي\lس و ت)~يعات 2ريhيل ي)$lس ;M9 فرJ يب |} ?lm J\ها اإلقالH; w أقسام GPj % أج=,ة 45!3 أو أج=,ة !u /0 6A TD % ا+قراN الثا2تة التي تستخدم r7م القطاw املعياx@D JI بايL8 ال<rم ا+قىص ل6قرN با'تخدام DuD (Q o3p ترياباي8 أو ) x@D × D بايuU @ S )8 2ي\ام ال<rم ا+قىص ل6قرN با'تخدام GPj 'يك)ن FuA ~يتاباي8 أو ) x@D × D بايU T S U @ S )8 والسnC % ذلك ا'تخدام H; 82 6A أجM *ناويH الكتM امل\Gقية % جدول أقسام u GPj تاIيخياL رشhة |$تي LM كا$8 وIاV تG)ير LGPj أواخر التسعينات )L)DEEE الذJ أصCح ج,H; V ;)اصفة !U D S Y /0 % عام DE@E وت<8 |?اIة Qيئة خاصة تد*ى !P\; u _`abc /0 عام uDEEF قطاعات GPT % عام LDE@E *ندما بدأ ;\تr)ن ا+قراN الثا2تة الت<)ل |ىل ت)ظي.
    [Show full text]
  • "Putting Trust Into Computing: Where Does It Fit?"
    "Putting Trust Into Computing: Where Does it Fit?" Monday, February 14, 2005 9:00 a.m. – 12:00 p.m. Copyright© 2005 Trusted Computing Group - Other names and brands are properties of their respective owners. Slide #1 Agenda 09:00am Introduction Jim Ward, IBM, TCG Board President / Chair 09:05am Trusted Network Connect Overview Thomas Hardjono, VeriSign 9:45am Open Source Solutions Dr. Dave Safford, IBM 10:25am Writing and Using Trusted Applications Ralph Engers, Utimaco Safeware AG; George Kastrinakis, Wave Systems; William Whyte, NTRU Cryptosystems, Inc. 11:15am Customer Case Studies Stacy Cannady, IBM; Manny Novoa, HP 11:50am Q&A Mark Schiller, HP; Jim Ward, IBM; Brian Berger, Wave Systems Copyright© 2005 Trusted Computing Group - Other names and brands are properties of their respective owners. Slide #2 Agenda 09:00am Introduction Jim Ward, IBM, TCG Board President / Chair Jim Ward is a Senior Technical Staff Member and security architect within the IBM software group division. Ward has been a core contributor in the security standards space and currently serves as the President and Board Chair of the Trusted Computing Group. Copyright© 2005 Trusted Computing Group - Other names and brands are properties of their respective owners. Slide #3 TCG Mission Develop and promote open, vendor-neutral, industry standard specifications for trusted computing building blocks and software interfaces across multiple platforms Copyright© 2005 Trusted Computing Group - Other names and brands are properties of their respective owners. Slide #4 TCG Board of Directors Copyright© 2005 Trusted Computing Group - Other names and brands are properties of their respective owners. Slide #5 TCG Organization Board of Directors Jim Ward, IBM, President and Chairman, Geoffrey Strongin, AMD, Mark Schiller, HP, David Riss, Intel, Steve Heil, Microsoft, Tom Tahan, Sun, Nicholas Szeto, Sony, Bob Thibadeau, Seagate, Thomas Hardjono, VeriSign Marketing Workgroup Technical Committee Advisory Council Administration Brian Berger, Wave Systems Graeme Proudler, HP Invited Participants VTM, Inc.
    [Show full text]
  • Open Source TPM Support
    Open Source TPM support Open source application and support software for TPM is available for several operating systems like Linux, Android and in different programming languages supporting the following scenarios: - embedded Systems - servers - mobile communication and portable devices (e.g. tablet computer or smartphone) Open source implementations can also be ported to other platforms and processors and may be act as a starting point for the development of new applications. Some open source projects from the following list are supported by Infineon while other packages are separately developed by independent parties. The following list of Open Source software utilizing Trusted Computing and/or TPM software makes no claim to be complete and represents a limited number of projects: 1. Linux TPM Driver ( http://www.kernel.org ) Linux device driver for Trusted Platform Modules (TPM) in standard kernel (Vanilla). 2. I2C driver for TPM The driver is available on Linux kernel.org ( https://lkml.org/lkml/2011/7/22/137 ) 3. Trusted GRUB ( http://sourceforge.net/projects/trustedgrub ) Trusted GRUB extends the GRUB bootloader for Linux platforms with TPM support. This makes it possible to provide a secure Bootstrap architecture; Code is in general useful for initializing a Trusted Platform Module and execute integrity measurement based on Trusted Computing. 4. UBoot based on TPM with I2C ( http://git.chromium.org/gitweb/?p=chromiumos/third_party/u- boot.git;a=tree;f=drivers/tpm/slb9635_i2c;hb=chromeos-v2011.03 ) UBoot involving TPM using I2C interface. 5. The TROUSERS project ( http://sourceforge.net/projects/trousers ): An open-source TCG Software Stack implementation created and released by IBM.
    [Show full text]
  • Micron Technology, Wave Systems, Lenovo and American Megatrends Inc
    October 28, 2014 Micron Technology, Wave Systems, Lenovo and American Megatrends Inc. Announce Intention to Create New Industry Standard to Meet Heightened Global Security Requirements Companies Will Collaborate to Strengthen Core Root of Trust for Measurement for the Enterprise Supply Chain BOISE, Idaho, Oct. 28, 2014 (GLOBE NEWSWIRE) -- Micron Technology, Inc. (Nasdaq:MU), a global leader in advanced semiconductor systems, and Wave Systems Corp. (Nasdaq:WAVX), a leading provider of endpoint security, today announced they intend to expand their collaboration to include Lenovo (HKSE:992) (ADR:LNVGY) and American Megatrends Inc. (AMI). Together, the four companies plan to develop advanced enterprise-class security offerings to address the escalating concerns of governments and multinational businesses. To meet the overall objective of verifying and securing software components, these solutions will significantly strengthen the Core Root of Trust for Measurement (CRTM) to offer best-in-class protection against current and emerging pre-boot threats within the supply chain. The companies intend for these solutions to form the basis of a new industry standard designed to ensure the integrity of the supply chain. According to the 2014 Verizon DBIR report, supply chain vulnerabilities and third-party vendors are still a leading cause of enterprise data breaches (Source, Verizon DBIR, 2014). With major brands continually leaking sensitive enterprise data, it is becoming even more critical to architect a comprehensive enterprise security suite that protects memory content from its inception in manufacturing throughout a computing device's life cycle. By providing verification of the CRTM, the first BIOS code that executes, the security of system measurements can be ensured rather than implicitly trusted, reducing the risk of supply chain attacks.
    [Show full text]
  • Enabling Next Generation Configuration And
    presented by Enabling Next Generation Configuration and Power Management on ARM Presented by Dong Wei, HP Fellow UEFI Forum Vice President (Chief Executive), ACPI SIG Secretary Oct 28, 2013 Updated 2011-06-01 The UEFI Forum www.uefi.org 1 ACPI Technology • Static tables and primary runtime interpreted control methods provided by system firmware to the OS for system configuration, power management and error ACPI Spec defined Tables handling Referenced but not specified in the ACPI Spec • Processor architecture agnostic The UEFI Forum www.uefi.org 2 ACPI Governance • ACPI SIG – HP, Intel, Microsoft, Phoenix and Toshiba are Promoters – 10 additional Contributing Adopters – 5 additional Adopters ACPI SIG HP/Intel/Microsoft/Phoenix/Toshiba The UEFI Forum www.uefi.org 3 UEFI Technology • Platform Initialization (PI): – Interfaces produced & consumed by firmware only; promote interoperability between firmware components • UEFI: – Pre-OS (and limited runtime program interfaces) between UEFI Applications (incl. OSes)/UEFI Drivers and system firmware The UEFI Forum www.uefi.org 4 The UEFI Forum Organization Chart Officers: Board of Directors (11 Promoters) President: Mark Doran (Intel); VP (CEO): Dong Wei (HP) Secretary: Jeff Bobzin (Insyde); Treasurer: Bill Keown (Lenovo) Industry & UEFI Platform Communications Specification Initialization Test WG WG WG WG Security Security Subteam Subteam Configuration Subteam 11 Promoters Network 40 Contributors Subteam 184 Adopters Shell 15 Individual Adopters Subteam ARM Binding Subteam 250 Members The UEFI
    [Show full text]
  • OS X Mavericks
    OS X Mavericks Core Technologies Overview October 2013 Core Technologies Overview 2 OS X Mavericks Contents Page 4 Introduction Page 5 System Startup BootROM EFI Kernel Drivers Initialization Address Space Layout Randomization (ASLR) Compressed Memory Power Efficiency App Nap Timer Coalescing Page 10 Disk Layout Partition Scheme Core Storage File Systems Page 12 Process Control Launchd Loginwindow Grand Central Dispatch Sandboxing GateKeeper XPC Page 19 Network Access Ethernet Wi-Fi Multihoming IPv6 IP over Thunderbolt Network File Systems Access Control Lists Directory Services Remote Access Bonjour Page 25 Document Lifecycle Auto Save Automatic Versions Document Management Version Management iCloud Storage Core Technologies Overview 3 OS X Mavericks Page 28 Data Management Spotlight Time Machine Page 30 Developer Tools Xcode LLVM Instruments Accelerate Automation WebKit Page 36 For More Information Core Technologies Overview 4 OS X Mavericks Introduction With more than 72 million users—consumers, scientists, animators, developers, and system administrators—OS X is the most widely used UNIX® desktop operating system. In addition, OS X is the only UNIX environment that natively runs Microsoft Office, Adobe Photoshop, and thousands of other consumer applications—all side by side with traditional command-line UNIX applications. Tight integration with hardware— from the sleek MacBook Air to the powerful Mac Pro—makes OS X the platform of choice for an emerging generation of power users. This document explores the powerful industry standards and breakthrough innovations in the core technologies that power Apple’s industry-leading user experiences. We walk you through the entire software stack, from firmware and kernel to iCloud and devel- oper tools, to help you understand the many things OS X does for you every time you use your Mac.
    [Show full text]
  • Trusted Computing
    Grazer Linux Tag 2006 Linux Powered Trusted Computing DI Martin Pirker <[email protected]> DI Thomas Winkler <[email protected]> GLT 2006 - Trusted Live Linux - Martin Pirker + Thomas Winkler, IAIK TU Graz 1 Übersicht ● Einführung und Motivation ● Trusted Computing - Geschichte ● TPM Chips: Hardware, Funktion und Anwendungen ● Chain of Trust ● Kryptografische Schlüssel und Schlüsselverwaltung ● Identitäten ● Attestierung ● Virtualisierung ● Stand der Dinge unter Linux: Treiber, Middleware, Anwendungen GLT 2006 - Trusted Live Linux - Martin Pirker + Thomas Winkler, IAIK TU Graz 2 Einführung ● einschlägige Medien voll mit Meldungen über Sicherheitsprobleme ● ständig neue Initiativen um diese Probleme zu lösen ● ein Ansatz: Trusted Computing von der Trusted Computing Group (TCG) ● bietet Möglichkeit festzustellen welche Software auf einem Computer ausgeführt wird ● soll Vertrauen in Computer erhöhen GLT 2006 - Trusted Live Linux - Martin Pirker + Thomas Winkler, IAIK TU Graz 3 Motivation (1/2) ● bis heute mehrere Millionen Rechner mit TPMs ausgeliefert – wer im Publikum hat schon ein TPM in seinem Rechner? – wer weiß was es kann und verwendet ihn? GLT 2006 - Trusted Live Linux - Martin Pirker + Thomas Winkler, IAIK TU Graz 4 Motivation (2/2) ● viele unklare und teilweise einseitige Medienberichte ● nächstes Microsoft Betriebssystem soll Trusted Computing unterstützen ● welche Perspektiven gibt es im Open Source Bereich? ● Ziele des Vortrags: – welche Technologien stecken hinter Trusted Computing? – verstehen der Wechselwirkungen und Konsequenzen – Anwendung(en) und Nutzen im Open Source Bereich GLT 2006 - Trusted Live Linux - Martin Pirker + Thomas Winkler, IAIK TU Graz 5 Trusted Computing - Organisation ● ursprünglich: TCPA – Trusted Computing Platform Alliance ● jetzt: TCG – Trusted Computing Group ● Führungspositionen (Promotors): – AMD, HP, IBM, Infineon, Intel, Lenovo, Microsoft, Sun ● Abstufungen der Mitgliedschaft bis hin zu akademischen Beobachtern (z.B.
    [Show full text]
  • TRUSTED COMPUTING GROUP (TCG) TIMELINE February 2011
    TRUSTED COMPUTING GROUP (TCG) TIMELINE February 2011 2003 Trusted Computing Group is announced with membership of 14 companies, including Promoters and board members AMD, Hewlett-Packard, IBM, Intel Corporation, Microsoft, Sony Corporation and Sun Microsystems, Inc. TCG structure and vision are created to enable extension of trusted computing beyond the PC into the enterprise. TCG adopts existing specifications for the Trusted Platform Module (TPM) security chip for clients and publishes as an open industry specification. 2004 TCG announces the Trusted Platform Module (TPM) specification 1.2. Manufacturers begin shipping a variety of enterprise desktop and notebook PCs equipped with TPMs and software to enable applications including data and file encryption, secure email, single sign-on, storage of certificates and passwords and other applications. Members begin participating in work groups to address security in mobile devices, storage, servers, peripherals and infrastructure requirements. TCG also announces the Trusted Network Connect (TNC) subgroup to work on an open specification for network access control and endpoint integrity and the addition of almost 30 new members to focus on the effort. Group starts to define requirements and use cases for an open specification. Membership expands to 98 companies by end of the year, with participation broadening beyond semiconductor and client companies to software developers, networking and storage companies. The group initiates an advisory council of leading IT, privacy, finance and security industry experts. The group also begins a liaison program with other industry standards groups and begins a mentoring program for those researchers and academic institutions doing research on trusted computing and related topics. 2005 The group expands its board of directors.
    [Show full text]
  • UEFI 2.1 and PI 1.0 Details and Differences Michael A
    Plug-fest MULTIPLY YOUR INNOVATION AND MAXIMIZE YOUR POTENTIAL MULTIPLY YOUR KNOWLEDGE Plug-fest UEFI 2.1 and PI 1.0 Details and Differences Michael A. Rothman One of the many UEFI guys Agenda • A look at EFI and UEFI Overview • UEFI 2.1 New Content and Changes • Concept Demo • PI 1.0 Content and Changes • Future Development and Test Plans Plug-fest 3 EFI and UEFI Overview Brief History On EFI y Interface specification - Implementation agnostic OS Loader y Abstracts BIOS from OS - Decouples development EFI y Compatible by design - Evolution, not revolution BIOS Compatibility y Modular and extensible Hardware - OS-Neutral value add y Provide efficient Option ROM Replacement - Common source for multiple CPU architectures EFI is the successor to BIOS Plug-fest 4 EFI and UEFI Overview UnifiedUnified EFIEFI Forum,Forum, Inc.Inc. createdcreated forfor standardizationstandardization A Washington non-profit Corporation - Develops, promotes and manages evolution of Unified EFI Specification - Continue to drive low barrier for adoption Promoter members: - AMD, AMI, Apple, Dell, HP, IBM, Insyde, Intel, Lenovo, Microsoft, Phoenix Tiered Membership: - Promoters, Contributors and Adopters More information: www.uefi.org Industry momentum for BIOS standardization Plug-fest 5 EFI and UEFI Overview UEFIUEFI MembershipMembership Promoters: board and corporate officers Contributors: - Corporations, groups or individuals wanting to participate in UEFI - Chance to join work groups and contribute to spec or test development - Early access to drafts and work in progress Adopters: - Any entity wanting to implement the specification Membership is open / encourages industry participation Plug-fest 6 EFI and UEFI Overview HowHow thethe ForumForum WorksWorks UEFI Board USWG UCST PIWG UNST USST UTWG USHT ICWG Each sub-team focuses Publications/Decisions Each work group on specific topics and ratified by the board approves/delivers different contributes material to content to the public.
    [Show full text]
  • Working Document on Trusted Computing Platforms and in Particular on the Work Done by the Trusted Computing Group (TCG Group)
    ARTICLE 29 Data Protection Working Party 11816/03/EN WP 86 Working Document on Trusted Computing Platforms and in particular on the work done by the Trusted Computing Group (TCG group) Adopted on 23 January 2004 This Working Party was set up under Article 29 of Directive 95/46/EC. It is an independent European advisory body on data protection and privacy. Its tasks are described in Article 30 of Directive 95/46/EC and Article 14 of Directive 97/66/EC. The secretariat is provided by Directorate E (Services, Copyright, Industrial Property and Data Protection) of the European Commission, Internal Market Directorate-General, B-1049 Brussels, Belgium, Office No C100-6/136. Website: www.europa.eu.int/comm/privacy Working Document on Trusted Computing Platforms and in particular on the work done by the Trusted Computing Group (TCG group) THE WORKING PARTY ON THE PROTECTION OF INDIVIDUALS WITH REGARD TO THE PROCESSING OF PERSONAL DATA set up by Directive 95/46/EC of the European Parliament and of the Council of 24 October 19951, having regard to Articles 29 and 30 paragraphs 1 (a) and 3 of that Directive, having regard to its Rules of Procedure and in particular to articles 12 and 14 thereof, has adopted the present Working Document: Background and future perspectives for trusted computing platforms The concept of trusted computing platforms originates from the computer industry’s observation that the current personal computer model is not conducive to guaranteeing security, as demonstrated by virus attacks, the possibility of spying on data being input, pirating of software and works of art, etc.
    [Show full text]
  • TCG Guidance for Secure Update of Software and Firmware on Embedded Systems
    R E TCG Guidance for Secure Update of Software and Firmware on F Embedded Systems E R Version 1.0 Revision 72 E February 10, 2020 N Contact: C [email protected] E Published TCG Guidance for Secure Update of Software and Firmware on Embedded Systems | Version 1.0 | Revision 72 | 2/10/2020 | Published © TCG 2020 TCG Guidance for Secure Update of Software and Firmware on Embedded Systems DISCLAIMERS, NOTICES, AND LICENSE TERMS THIS DOCUMENT IS PROVIDED "AS IS" WITH NO WARRANTIES WHATSOEVER, INCLUDING ANY WARRANTY OF MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR ANY PARTICULAR PURPOSE, OR ANY WARRANTY OTHERWISE ARISING OUT OF ANY PROPOSAL, DOCUMENT OR SAMPLE. Without limitation, TCG disclaims all liability, including liability for infringement of any proprietary rights, relating to use of information in this document and to the implementation of this document, and TCG disclaims all liability for cost of procurement of substitute goods or services, lost profits, loss of use, loss of data or any incidental, consequential, direct, indirect, or special damages, whether under contract, tort, warranty or otherwise, arising in any way out of use or reliance upon this document or any information herein. This document is copyrighted by Trusted Computing Group (TCG), and no license, express or implied, is granted herein other than as follows: You may not copy or reproduce the document or distribute it to others without written permission from TCG, except that you may freely do so for the purposes of (a) examining or implementing TCG documents or (b) developing, testing, or promoting information technology standards and best practices, so long as you distribute the document with these disclaimers, notices, and license terms.
    [Show full text]