ISO/IEC 11889-2:2009 PDF

Name: ISO/IEC 11889-2:2009 — Information technology — Trusted Platform Module — Part 2: Design principles
SKU: ISO/IEC 11889-2:2009
Price: 278.55 EUR
Availability: InStock

Information technology — Trusted Platform Module — Part 2: Design principles

Название (английский):

ISO/IEC 11889-2:2009

Information technology — Trusted Platform Module — Part 2: Design principles

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 143
Дата публикации:: 18 мая 2009 г.
Издание:: ISO/IEC IS 11889 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version2 145 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:24 раб. дн. (перевод)

Цена:2 145 €

Описание (английский):

ISO/IEC 11889 defines the Trusted Platform Module (TPM), a device that enables trust in computing platforms in general. ISO/IEC 11889-2:2009 defines the principles of TPM operation. These include base operating modes, cryptographic algorithms and key sizes for the algorithms, basic interoperability requirements, basic protocols and the use of the protocols, and use of TPM resources.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/IEC 11889-2:2009 - "Information technology - Trusted Platform Module - Part 2: Design principles" defines the design principles and operational behavior for the Trusted Platform Module (TPM). Part 2 focuses on the TPM’s base operating modes, core cryptographic building blocks, interoperability requirements, authorization and transport protocols, and use of TPM resources (keys, PCRs, NV storage). The document is normative in large part and uses RFC‑2119 keywords (MUST/SHOULD/MAY) to state requirements. TPM implementers should also consult platform‑specific specifications for a complete build.

Key topics and technical requirements

TPM architecture and components: input/output, cryptographic co‑processor, key generation, HMAC, RNG, SHA‑1 engine, execution engine, NV memory, power detection and physical presence mechanisms.

Cryptographic primitives and interoperability: references to SHA‑1, AES and RSA, and use of established schemes (OAEP, PKCS#1, HMAC) for encryption, signing and integrity. The part prescribes acceptable algorithms and key selection guidance for interoperability.

Key lifecycle and identity: Endorsement Key (EK) creation and protection, Attestation Identity Keys (AIKs), Storage Root Key (SRK), and rules for key use and migration.

Roots of trust: Root of Trust for Reporting (RTR) and Root of Trust for Storage (RTS), platform identity and privacy considerations, PCR (Platform Configuration Register) usage and measurement model.

Authorization & transport: authorization protocols (OIAP, OSAP), transport sessions, ADIP/ADCP/AACP protocols, handling brute‑force/dictionary attack risks, and session management.

Operational states & lifecycle: initialization, self‑test, startup, enabling/activating/ownership, clearing TPM, field upgrades and maintenance.

Non‑volatile storage & counters: NV storage design principles, monotonic counters, audit/tracking and transport protection.

Advanced functions: Direct Anonymous Attestation (DAA), certified migration, delegation model, time stamping and tick architecture.

Practical applications and who uses it

TPM silicon vendors and firmware developers use this standard to design compliant TPM chips and internal services.

Platform OEMs and BIOS/UEFI integrators implement TPM interfaces, PCR measurements and ownership workflows.

Security architects and solution integrators leverage the standard to build trusted computing features: secure boot, measured launch, hardware-backed key storage, remote attestation and secure credential storage.

Certification bodies and evaluators use the document alongside evaluation standards (e.g., ISO/IEC 19790) when assessing TPM security.

Related standards

ISO/IEC 11889 (other parts: Part 1 Overview, Part 3 Structures, Part 4 Commands)

Cryptographic and protocol references cited: ISO/IEC SHA and AES standards, PKCS#1, IEEE P1363, IETF RFC 2104/2119, and ISO/IEC 19790 (security evaluation).

Keywords: ISO/IEC 11889-2:2009, Trusted Platform Module, TPM design principles, TPM architecture, EK, AIK, PCR, RTR, RTS, TPM authorization protocols, TPM interoperability.

ISO/IEC 11889-2:2009 PDF

Abstract

Похожие стандарты

Overview

Key topics and technical requirements

Practical applications and who uses it

Related standards

Технические детали

EN ISO/IEC 19896-2:2026

Information security, cybersecurity and privacy protection - Requirements for the competence of IT security c…

ISO/IEC 11889-4:2009

Information technology — Trusted Platform Module — Part 4: Commands

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies