Hardware Security
Which describes remote attestation?
- AA remote person viewing and operating the device's screen
- BReporting the device's location to a server via GPS
- CA device presents the state of its running software, signed with a key inside its chip, to a remote server, which then judges whether it can be trusted
Show answer and explanation
Answer: C. A device presents the state of its running software, signed with a key inside its chip, to a remote server, which then judges whether it can be trusted
In remote attestation, a device signs software measurements recorded in its TPM or TEE with a key that cannot be extracted from the chip and sends them to a server. The server checks the signature and measurements and grants secret data or services only to devices running approved software. It is used when entrusting confidential computation to the cloud or vetting devices joining corporate networks.
- A. It is different from remote control.
- B. It is not location reporting.
- C. Correct. It uses records such as those from measured boot.