可信计算中的远程认证体系

提出了一种安全高效的元件的远程认证体系结构,体系结构中采用多种签名结合的方式确保各元件属性认证的真实性与正确性,采用基于中国余数定理的子群签名的方式确保用户平台认证时的私密性。与现有的远程认证体系结构相比,本方案引入了可恢复原消息的盲签名,减小了证书发布机构的被攻击风险,提高了整个体系结构的安全性。同时子群签名相对于现有方案普遍采用的零知识签名,具有更高的效率。

Remote Attestation System in Trusted Computing

A safe and efficient component-level property attestation system is proposed.The program uses a variety of signature to ensure the authenticity and exactitude of each component’s property attestation process and utilize the virtu al sub-group signature to achieve the privacy of the user platform.And compare d to existing remote attestation system,the program imports blind signature which can recover the message to reduce risk of attack on Certificate Authorization and to improve the sec urity of remote attestation system.The sub-group has a higher efficiency than the exi sting program which widely uses zero-knowledge signature.