METHOD AND SYSTEM FOR PERFORMING REMOTE ATTESTATION WITH A GATEWAY IN THE CONTEXT OF A TRUSTED EXECUTION ENVIRONMENT (TEE)

摘要

A method for performing remote attestation, the method comprises using a gateway (30) between a verifier (10) and a remote host (20), wherein the remote host (20) includes a trusted execution environment, TEE (22), in which an application (24) to be attested is running; receiving, by the gateway (30), an attestation request from the verifier (10); determining, by the gateway (30), a type of the TEE (22) of the remote host (20) and an expected identity of the application (24) to be attested and selecting an attestation protocol based on the determined type of the TEE (22) of the remote host (20); and verifying, by the gateway (30), the expected identity of the application (24) to be attested by executing the selected attestation protocol with the remote host (20) and transmitting an attestation result to the verifier (10). Furthermore, a system for performing remote attestation is disclosed, wherein the system comprises an attestation gateway (30) to be disposed between the verifier (10) and the remote host (20).