HSM for secure code execution

• Grant number: 11/51395-0
• Support type: Research Grants - Innovative Research in Small Business - PIPE
• Duration: October 01, 2012 - November 30, 2013
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Principal researcher: Roberto Alves Gallo Filho
• Grantee: Roberto Alves Gallo Filho
• Company: Kryptus Segurança da Informação Ltda
• City: Campinas

Abstract

Cyber ​​security and data protection and communication issues are not new, and do not require presentation; their impacts have increased day by day and are reflected in several areas: from industrial espionage action, invasion and defacing of web servers, to cyberwarfare. Much of these security issues arise from complete non-existence or non-use of a Trusted Computing Base (TCB) by production systems on the market today. When we consider cloud computing environment, security concerns are even greater, and not only technical limitations hamper the implementation of a TCB, but also scientific challenges themselves. The objective of this project is to study a scientific-technological-financial viability of a Trusted Computing Base (TCB) with a highly security platform for cloud applications, called "Hardware Security Module for Cloud eXecution" - HSM-CX. The HSM-CX will be based on the already established concept of Hardware Security Module, the equipment class of which the proposer already has technological domain and is the national sales leader, serving as a solid technological basis for this proposal development. HSM-CX will be the first worldwide proposal, to the best of our knowledge, to provide a TCB for cloud execution. This proposal, therefore, has as main objective to carry out a technical feasibility study (object of this PHASE I of PIPE) for the development of HSM-CX that, besides complying with the safety requirements present in the main national and international standards, will be of a sufficient performance for current applications and at an affordable cost to potential end-users of this type of solution. At the end of the project, object of this proposal, it is expected to have a basic prototype, minimally tested, with some key functionalities, besides a complete mapping of the requirements and specifications for the final product development (object for PIPE PHASE II). (AU)