A Trust Enhanced Email Application Using Trusted Computing

Today's crimeware is becoming so sophisticated and well advanced that it can increasingly attack an end-user's platform directly to steal critical data to use in criminal activities. This has created a requirement for a more specialized secure email system that supports more than just software-based data encryption for enterprises dealing with highly sensitive data. We present a proof-of-concept email application that utilizes hardware-based keys from trusted computing which are more resistant to direct platform exploitation. Through the demonstrator, we show that it is possible today to build a special-purpose trust- enhanced email application which also offers portability and mobility.