SecureCore security architecture: authority mode and emergency management

Abstract

This document describes research in the SecureCore project. It describes results in the integration of SP Authority Mode hardware security features into the SecureCore Software Security Architecture and the SecureCore Trusted Management Layer. The context of integration is described including the target security policy, transient trust requirements and rationale. The design for protecting secondary storage volumes, trusted channels, and emergency management is described. Design considerations and recommendations for future work are also included.