When users play games online you want to ensure that

When users play games online, you want to ensure that they are
interacting with a trusted PlayStation device. Assume that each
PlayStation device has an integrated Trusted Platform Module
(TPM) .
iii. Explain why the TPM can be considered as a root of trust.
Using the direct anonymous attestation protocol , the online game
server and update server can verify that the remote PlayStation
device is a trusted one before it can be allowed to connect to the
game server for downloading games and the update server for
downloading updates respectively.
iv. What are the typical values which the TPM on the PlayStation
sends to the server for verification?
(1 mark)
(3 marks)
(2 marks)
(2 marks)

Page 10 of 13
v. Which key is used to sign these values?
vi. Where is this key stored on the TPM?
vii. How many keys such keys would the TPM have of a
PlayStation have?
viii. Which key uniquely identifies the TPM? Where is it stored on
the TPM?
ix. How does the use of a TPM on the physical servers provide
boot integrity and protection in the Sony cloud?
TV shows and movies are stored encrypted on the Cloud servers.
x. Assuming that a symmetric key is used to encrypt the TV
shows and movies, describe how the symmetric key will be
secured by the TPM.
xi. Will such encrypted data be migratable ?
(2 marks)
(2 marks)
(2 marks)
(2 marks)
(2 marks)
(6 marks)
(1 mark)
QUESTION 3: (20 MARKS )
(a) Consider the Progressive Elliptic Curve Encryption (PECE) for
securely storing and sharing data on a cloud storage service such as
Dropbox.
i. Discuss the benefits of using the PECE for securely storing and
sharing data as compared to symmetric encryption.
ii. Discuss the limitation(s) of PECE.
iii. If an attacker captures data exchanged between a data owner
and a data recipient during the PECE data sharing, assuming
that the Cloud Service Provider does not collude with the
attacker, will the attacker be able to compute the plaintext