One interesting development out of the recent announcement of Google Chrome on your operating system has been supported by the Trusted Computing Trusted Platform Module (TPM) chip incorporated into the specification of the ground up, but first, a little hand. There are two operating systems, OS OS chromium and chromium, both of whom support the TPM, and both are basically identical, similar reflection Google Chrome and Chromium web browser. Chrome's version is the version of the Google brand, Chrome is Open Source public release, but in theory use the same code base. Henceforth I will use Chrome more familiar term, although the version applicable on the browser and operating system is chromium.
What does Chrome OS and TPM give us?
Trusted Computing and TPM, has an image very poor among open source fans, many of whom love Google, so that support for a TPM in its new operating system induces a bit of cognitive dissonance. Do not worry, however, Google "do no evil, and this philosophy is reflected in its approach. First, support for a TPM is just one option, albeit from the chromium Open Source is no provider can make the mandatory TPM. Then, if a TPM would be present, the paper describes the following method suggested by the Group of Trusted Computing for the implementation of a burst of confidence, a method that produces nothing more than a boot record of trust through the use records of trust in the TPM.
This means that client applications and remote servers, can attest to the state of the device and be able to say if booted into a known trusted state. Although from a point of view, could throw up their hands in horror from third place to check the settings TPM and therefore our operating system, the benefit is for banking applications, for example, where the bank can check the status of TPM for OS Chrome, and if you decide that is a stranger, therefore potentially unsafe due to the possibility of spy software on the device, deny access to your bank.
What TPM Chrome operating system and not give us?
The TPM does not prevent your device piracy, Google will be recognized at the outset that people want to install not only its own operating system on the device, but also the firmware, so they have provided methods that allow the device to put underway in these circumstances also. As the TPM chip is always a liability, there is no way that can detect an operating system or firmware and avoid unexpected starter, despite what critics say dwt.
In fact, if you have a bank can convince lit and who knows what they're doing, it might even provide a way to allow it to register a known good system state based on the software configuration of your own staff, as well as described in the previous section, the bank could attest to his more personal TPM system configuration, accepting his own private collection of devices, but the detection of anomalies so that the custom settings.
But why do I want a TPM Watching Over Me?
In most households are likely to be two classes other Internet connected devices. The first is the computer, electronics, as a second home televisions or game machines. For private use computers, TPMs are a little difficult to sell except for appliances, lighting and just want to make them work, the average user is not interested in anything but the norm swamp outside the box on the PlayStation. A device based on Google's new operating system falls more into the latter category, you (with you think is the average user, you are not the leet haxx0r) just want to work.
But the Internet is a wild world, and surf full time may be exposed to all potentially dangerous type of content that can infect one computer. By adding a TPM in the mix, you, the user has an additional assurance that the device is still in a safe and trusted way. For example, after starting the Chrome OS-based device could query the status of TPM and use this information to decrypt a message that is displayed upon login, so if you see a distorted message could know that the device is on standby, then taking steps to correct the problem.
Similarly, access services can also check the status of the TPM in the operating system, and whether the State is not recognized, take action to prevent illegal or invalid access.
Finally, since each TPM may have a unique identity, if the device is stolen, there may be systems for blacklisted devices in particular. A device on the black list may be refused access to certain services, and (note the following is not a function of the TPM, but developers can add to an operating system with a TPM), then the order to remove personally identification data on the disk or even within the TPM, or even more drastic, have a switch turned off, although that option is not an error very tolerant!
Thus, the TPM can build a secure, reliable and easy device of friends that just works, such as televisions and tape recorders video of the same work, so if you're looking to get an operating system based on compressed Chrome, picture frame, laptop, or whatever factor form that appears, make sure to ask the seller if there is a TPM on the device.
Ken Yasumoto-Nicolson has much experience working on software security and Trusted Computing. He produces Trusted Computing-related material both publicly and privately, and runs the leading blog on the Trusted Computing world, with Google’s Chrome and the TPM being one focus.
Ergo Proxy AMV
