Research Intern, GlobalPlatform TPS Entity Attestation Verifier

Job Description:

Helsinki System Security Lab Internship 2026, GlobalPlatform TPS Entity Attestation Verifier

Remote attestation is a core pillar of confidential computing: it enables systems to prove their integrity before handling sensitive data. GlobalPlatform's Trusted Platform Services (TPS) extends the IETF RATS model with its own Entity Attestation claims and profiles. To support adoption of this technology, we need a practical attestation verifier for GlobalPlatform TPS Entity Attestation Tokens.

The research problem is to design and implement a standards-based verifier that can validate GlobalPlatform Entity Attestation Tokens using IETF RATS concepts such as EAT (Entity Attestation Token) and CoRIM (Concise Reference Integrity Manifest). The work should also analyze how other attestation ecosystems (e.g., TEEs, confidential computing frameworks) apply similar models.

The project will use the Veraison open-source framework, which provides an extensible attestation verification pipeline. Together with our experts, the student will:

* Study GP Entity Attestation, EAT, and CoRIM.
* Design how GlobalPlatform claims and trust anchors integrate into a Veraison-based verifier.
* Implement a proof-of-concept Veraison extension (primarily in Go).
* Create example GP Entity Attestation Tokens and CoRIM artifacts for testing.
* Document the design and findings in a Master's thesis.

We are looking for:

* Students who have completed most of their M.Sc. courses, in the field of CS/E.Eng
* Good programming skills and willingness to work in Go.
* Basic knowledge of cryptography (signatures, certificates, trust anchors).
* Familiarity with Linux tools and technical standards (IETF, GlobalPlatform).
* Sufficient skills to work and interact in English
* Good team-working skills
* Students with interest to do research and explore new challenges.

The following we count as advantage:

* Experience with remote attestation, TEEs, or confidential computing.
* Knowledge of CBOR/COSE, JWT-style security formats, or RATS concepts (EAT, CoRIM).
* Prior use of Go or contributions to open-source projects.
* Interest in combining applied research, open standards, and prototype implementation.

Location and internship period: This is a 6-month internship based at our Helsinki, Ruoholahti office.

The Helsinki Systems Security Laboratory in Huawei Finland (HSSL) drives renewal and mastery in the field of platform / device related security technologies for the mobile device. Our topical expertise lies in hardware-assisted isolation and system protection (hypervisor, TEE, kernel hardening) as well as functions like device key management, attestation and integrity