Controlled document distribution

The Trusted Platform Module (TPM) is a security hardware that is commonly found in most computers today, within which contains a range of security functions that has yet to be fully exploited. The objective of this project therefore, is to develop a prototype system to demonstrate the capabilities of a TPM-ready machine in controlling the distribution of sensitive documents. The system consists of 2 parts – the server, and the clients. Both the server and clients are TPM-ready, and contain applications to encrypt/decrypt documents, as well as manipulate and handle Platform Configuration Register values (PCRs) and cryptographic keys. The function of the server is mainly to store the sensitive documents as well as attest the state of the clients. For the purpose of this project, the server is assumed to be secured as it is critical to the operability of the entire system. This can be done by either setting up closed-circuit cameras or through the implementation of other physical security measures. The clients on the other hand, would be used to request for the permission to access and edit the sensitive documents stored on the server.Bachelor of Engineering (Computer Science