Trusted Hart for Mobile RISC-V Security

V. Ushakov; S. Sovio; Q. Qi; V. Nayani; V. Manea; P. Ginzboorg; J. E. Ekberg

doi:10.1109/TrustCom56396.2022.00228

Trusted Hart for Mobile RISC-V Security

V. Ushakov, S. Sovio, Q. Qi, V. Nayani, V. Manea, P. Ginzboorg^*, J. E. Ekberg

^*Corresponding author for this work

Not published at Aalto University

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

3 Citations (Scopus)

Abstract

The majority of mobile devices today are based on Arm architecture that supports the hosting of trusted applications in Trusted Execution Environment (TEE). RISC-V is a relatively new open-source instruction set architecture that was engineered to fit many uses. In one potential RISC-V usage scenario, mobile devices could be based on RISC-V hardware. We consider the implications of porting the mobile security stack on top of a RISC-V system on a chip, identify the gaps in the open-source Keystone framework for building custom TEEs, and propose a security architecture that, among other things, supports the GlobalPlatform TEE API specification for trusted applications. In addition to Keystone enclaves the architecture includes a Trusted Hart - a normal core that runs a trusted operating system and is dedicated for security functions, like control of the device's keystore and the management of secure peripherals. The proposed security architecture for RISC-V platform is verified experimentally using the HiFive Unleashed RISC-V development board.

Original language	English
Title of host publication	Proceedings - 2022 IEEE 21st International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2022
Publisher	IEEE
Pages	1587-1596
Number of pages	10
ISBN (Electronic)	978-1-6654-9425-0
DOIs	https://doi.org/10.1109/TrustCom56396.2022.00228
Publication status	Published - 2022
MoE publication type	A4 Conference publication
Event	IEEE International Conference on Trust, Security and Privacy in Computing and Communications - Virtual, Online, China Duration: 9 Dec 2022 → 11 Dec 2022 Conference number: 21

Publication series

Name	IEEE International Conference on Trust, Security and Privacy in Computing and Communications
ISSN (Electronic)	2324-9013

Conference

Conference	IEEE International Conference on Trust, Security and Privacy in Computing and Communications
Abbreviated title	TrustCom
Country/Territory	China
City	Virtual, Online
Period	09/12/2022 → 11/12/2022

Keywords

enclaves
mobile security
RISC-V
TEE

Access to Document

10.1109/TrustCom56396.2022.00228

Cite this

Ushakov, V., Sovio, S., Qi, Q., Nayani, V., Manea, V., Ginzboorg, P., & Ekberg, J. E. (2022). Trusted Hart for Mobile RISC-V Security. In Proceedings - 2022 IEEE 21st International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2022 (pp. 1587-1596). (IEEE International Conference on Trust, Security and Privacy in Computing and Communications). IEEE. https://doi.org/10.1109/TrustCom56396.2022.00228

@inproceedings{83d0fdb018794ad28e70f413994c05cf,

title = "Trusted Hart for Mobile RISC-V Security",

abstract = "The majority of mobile devices today are based on Arm architecture that supports the hosting of trusted applications in Trusted Execution Environment (TEE). RISC-V is a relatively new open-source instruction set architecture that was engineered to fit many uses. In one potential RISC-V usage scenario, mobile devices could be based on RISC-V hardware. We consider the implications of porting the mobile security stack on top of a RISC-V system on a chip, identify the gaps in the open-source Keystone framework for building custom TEEs, and propose a security architecture that, among other things, supports the GlobalPlatform TEE API specification for trusted applications. In addition to Keystone enclaves the architecture includes a Trusted Hart - a normal core that runs a trusted operating system and is dedicated for security functions, like control of the device's keystore and the management of secure peripherals. The proposed security architecture for RISC-V platform is verified experimentally using the HiFive Unleashed RISC-V development board.",

keywords = "enclaves, mobile security, RISC-V, TEE",

author = "V. Ushakov and S. Sovio and Q. Qi and V. Nayani and V. Manea and P. Ginzboorg and Ekberg, {J. E.}",

note = "Publisher Copyright: {\textcopyright} 2022 IEEE.; IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom ; Conference date: 09-12-2022 Through 11-12-2022",

year = "2022",

doi = "10.1109/TrustCom56396.2022.00228",

language = "English",

series = "IEEE International Conference on Trust, Security and Privacy in Computing and Communications",

publisher = "IEEE",

pages = "1587--1596",

booktitle = "Proceedings - 2022 IEEE 21st International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2022",

address = "United States",

}

Ushakov, V, Sovio, S, Qi, Q, Nayani, V, Manea, V, Ginzboorg, P & Ekberg, JE 2022, Trusted Hart for Mobile RISC-V Security. in Proceedings - 2022 IEEE 21st International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2022. IEEE International Conference on Trust, Security and Privacy in Computing and Communications, IEEE, pp. 1587-1596, IEEE International Conference on Trust, Security and Privacy in Computing and Communications, Virtual, Online, China, 09/12/2022. https://doi.org/10.1109/TrustCom56396.2022.00228

Trusted Hart for Mobile RISC-V Security. / Ushakov, V.; Sovio, S.; Qi, Q. et al.
Proceedings - 2022 IEEE 21st International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2022. IEEE, 2022. p. 1587-1596 (IEEE International Conference on Trust, Security and Privacy in Computing and Communications).

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Trusted Hart for Mobile RISC-V Security

AU - Ushakov, V.

AU - Sovio, S.

AU - Qi, Q.

AU - Nayani, V.

AU - Manea, V.

AU - Ginzboorg, P.

AU - Ekberg, J. E.

N1 - Conference code: 21

PY - 2022

Y1 - 2022

N2 - The majority of mobile devices today are based on Arm architecture that supports the hosting of trusted applications in Trusted Execution Environment (TEE). RISC-V is a relatively new open-source instruction set architecture that was engineered to fit many uses. In one potential RISC-V usage scenario, mobile devices could be based on RISC-V hardware. We consider the implications of porting the mobile security stack on top of a RISC-V system on a chip, identify the gaps in the open-source Keystone framework for building custom TEEs, and propose a security architecture that, among other things, supports the GlobalPlatform TEE API specification for trusted applications. In addition to Keystone enclaves the architecture includes a Trusted Hart - a normal core that runs a trusted operating system and is dedicated for security functions, like control of the device's keystore and the management of secure peripherals. The proposed security architecture for RISC-V platform is verified experimentally using the HiFive Unleashed RISC-V development board.

AB - The majority of mobile devices today are based on Arm architecture that supports the hosting of trusted applications in Trusted Execution Environment (TEE). RISC-V is a relatively new open-source instruction set architecture that was engineered to fit many uses. In one potential RISC-V usage scenario, mobile devices could be based on RISC-V hardware. We consider the implications of porting the mobile security stack on top of a RISC-V system on a chip, identify the gaps in the open-source Keystone framework for building custom TEEs, and propose a security architecture that, among other things, supports the GlobalPlatform TEE API specification for trusted applications. In addition to Keystone enclaves the architecture includes a Trusted Hart - a normal core that runs a trusted operating system and is dedicated for security functions, like control of the device's keystore and the management of secure peripherals. The proposed security architecture for RISC-V platform is verified experimentally using the HiFive Unleashed RISC-V development board.

KW - enclaves

KW - mobile security

KW - RISC-V

KW - TEE

U2 - 10.1109/TrustCom56396.2022.00228

DO - 10.1109/TrustCom56396.2022.00228

M3 - Conference article in proceedings

AN - SCOPUS:85151624740

T3 - IEEE International Conference on Trust, Security and Privacy in Computing and Communications

SP - 1587

EP - 1596

BT - Proceedings - 2022 IEEE 21st International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2022

PB - IEEE

T2 - IEEE International Conference on Trust, Security and Privacy in Computing and Communications

Y2 - 9 December 2022 through 11 December 2022

ER -

Ushakov V, Sovio S, Qi Q, Nayani V, Manea V, Ginzboorg P et al. Trusted Hart for Mobile RISC-V Security. In Proceedings - 2022 IEEE 21st International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2022. IEEE. 2022. p. 1587-1596. (IEEE International Conference on Trust, Security and Privacy in Computing and Communications). doi: 10.1109/TrustCom56396.2022.00228

Trusted Hart for Mobile RISC-V Security

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this