How to prevent copy/cloning of exe file in the SD card?

Question

Hello,

We are using a Zedboard with an FMCOMMS3 ( from analog devices) for a detector system. The executable file for standalone mode is in the SD card of the Zedboard. We are planning to send the detector for customer trials and evaluation.

How do we prevent someone from copying/cloning the exe file from the SD card?

Is there any unique hardware ID ( either zedboard or FMCOMMS 3 board ) that can be used for verification?

Thank you and hope to hear some suggestions.

Manoj

Jan Cumps · Answer

The AES-PMOD-TPM20-SLB9670-G Trusted Platform Module plugin, made for Zynq .

This allows you to deploy several check mechanisms. One option is that you embed the endorsement key of the TPM in the executable and use the linux TPM libraries to authenticate before proceeding with execution.

That way, one binary will only run on the hardware that has that particular unique TPM ic plugged in.

It also allows for trusted boot, where the device would only accept images signed by you...

Jan Cumps · Answer

To see how functionality is executed, I check the integration test set of the tpm2 github.

https://github.com/tpm2-software/tpm2-tools

Here is a proposed step guide: https://stackoverflow.com/questions/9117772/how-do-you-implement-a-platform-license-dongle-with-tpm-on-linux

Jan Cumps · Answer

There is a roadtest for this IC now: Infineon Trust Platform Module + Raspberry Pi 3 B

How to prevent copy/cloning of exe file in the SD card?

Top Replies