10.1 Introduction

It seems likely that TCG-compliant computing platforms will become widespread over the next few years. Once one accepts that the trusted computing paradigm offers an interesting and powerful set of security features, the natural question arises: for what purposes can this technology be exploited? In this chapter, we examine the application of trusted computing to securing Peer-to-Peer (P2P) networks.

The concept of P2P networking covers a diverse set of network types, supporting a wide variety of applications. The common feature shared by almost all P2P networks is the lack of any centralised control. In this respect, P2P networks are the antithesis of the traditional client server model. They have most famously become popular in the form of P2P file-sharing networks, providing a means of distributing (often copyrighted) material, such as music and video. Commercially oriented P2P networks are now coming to the fore. Useful introductions to P2P networking can be found in References ^[1] and ^[2].

Besides availability, security issues for P2P networks have not yet been widely addressed. A major conflict arises from the perceived requirement to provide anonymity for users of P2P networks and an increasing need to provide robust access control, data integrity, confidentiality and accountability services. These services are increasingly important as P2P e-commerce emerges and as industry moves towards using P2P technology in applications. The security situation for P2P networks is made worse because, by definition, they lack any centralised authority who can vouch...