Configuration Measurement for FPGA-based Trusted Platforms

This paper proposes a method for measuring hardware configurations for trusted platforms based on field programmable gate arrays (FPGA). The proposed system setup allows for partial reconfiguration as well as full reconfiguration of FPGA devices that can be used additionally as trusted platforms. In the system, slots are defined for fast partial dynamic reconfiguration. Predefined IP blocks may be configured into these. The reconfiguration is monitored and reported to a trusted platform module (TPM).Important configuration characteristics are extracted from the bitstream, stored, and evaluated in terms of predefined policies to ensure the integrity of the trusted FPGA platform.By incorporating this method the chain-of-trust known from trusted computing is extended into the underlying hardware.This enables remote verifiers to ensure a correct configuration of the device in order to adhere to safety commitments and allows for highly adaptive, trusted system-on-chips.