改进的移动计算平台直接匿名证明方案 improved direct anonymous attestation scheme for mobile computing platforms.pdfVIP

第34 卷第6 期 通 信 学 报 Vol.34 No. 6 2013 年6 月 Journal on Communications June 2013 doi:10.3969/j.issn.1000-436x.2013.06.008 改进的移动计算平台直接匿名证明方案 杨力，张俊伟，马建峰，刘志宏 （西安电子科技大学 计算机学院，陕西 西安 710071 ） 摘 要：分析了 Ge 等人提出的直接匿名证明方案的安全缺陷，指出该方案的认证协议在用于远程证明时不能抵 抗重放攻击和平台伪装攻击。提出一种改进的直接匿名证明的认证协议，引入会话密钥协商机制，增强互认证功 能。分析表明，改进方案在正确进行直接匿名证明的前提下，满足不可伪造性和匿名性，能够抵抗重放攻击和平 台伪装攻击，协议性能满足移动计算平台的可信验证需求。 关键词：可信计算；远程证明；直接匿名证明；密钥协商 中图分类号：TN918.1 文献标识码：A 文章编号：1000-436X(2013)06-0069-07 Improved direct anonymous attestation scheme for mobile computing platforms YANG Li, ZHANG Jun-wei, MA Jian-feng, LIU Zhi-hong (School of Computer Science Technology, Xidian University, Xi’an 710071, China) Abstract: The security flaws of a direct anonymous attestation scheme proposed by Ge, et al. Were analyzed, and the re- sult shows that the authentication protocol of the scheme is vulnerable to reply attacks and platform masquerade attacks when being used for remote attestation. An improved direct anonymous attestation authentication scheme with the in- volvement of key agreement was proposed to provide the property of mutual authentication. The analysis shows that the proposal can realize direct anonymous attestation with the properties of forgery-resistance and anonymity, and resist reply attacks and platform masquerade attacks; the scheme is effective and suitable for the mobile trusted computing platforms. Key words: trusted computing; remote attestation; direct anonymity attestation; key a