Software-based Dynamic Mobile Trusted Module (SW-dMTM)

The proposed SW-dMTM mobile security solution is lean and fully-software-based. The goal is to provide the required Roots of Trust (RoTs) and trusted security services via a fully software implementation while maintaining the heightened level of assurance typically only achieved through additional, security-centric hardware. This will be achieved by building a solution that is not only compatible with the Trusted Computing Group's (TCG) MTM mobile device security specification but also by supporting government use cases and providing additional dynamic trust verification. The solution has the following key benefits: (i) a cumulative chain of trust via a secure boot methodology, (ii) dynamic RoTs through the runtime verification and persistence achieved by stealth Trusted Agents, (iii) MTM trusted services and extensions. In addition to trusted services they provide the foundation for both static and dynamic data and application protection and attestation. The Phase I effort was successful in proving feasibility of key components through a proof-of-concept demonstration. The expected result of a Phase II proposal is a prototype that could be piloted by DHS. The TRL at the start of the Phase I effort was 2. This was brought to a level 4 through the completion of a proof-of-concept demonstration during Phase I. The expected TRL upon completion of the Phase II effort is 6. A Phase IIB/Cost Match opportunity would increase the TRL to 8 or 9.