TPM Resource Sharing for Embedded System Network Security

Embedded systems have been widely deployed in various applications in the IoT field, making them vulnerable to security threats. The conventional approach of equipping each system with a discrete Trusted Platform Module (dTPM) chip can dramatically increase the mass deployment cost of hardware. To address this challenge, we advocate adopting a new architecture in which only the central node is equipped with dTPM and each node with Software TPM (SWTPM) by leveraging the IBM Attestation Client Server (IBMACS) to detect malicious system modification.