基于属性的远程证明的隐私性分析  

On privacy of property-based remote attestation

作　　者：李尚杰[1,2] 贺也平[1] 刘冬梅[1,2] 袁春阳[3] 

机构地区：[1]中国科学院软件研究所基础软件工程中心,北京100190 [2]中国科学院研究生院,北京100049 [3]国家计算机网络应急技术处理协调中心,北京100029

出　　处：《通信学报》2009年第S2期146-152,共7页Journal on Communications

基　　金：国家自然科学基金资助项目(90818012);中国科学院知识创新工程重要方向项目(KGCXZ-YW-125)~~

摘　　要：远程证明技术就是分布式或者网络平台上建立信任的重要技术。建立在可信计算之上的可信证明方案更是可信计算TCG的提出的可信计算技术的关键部分。远程证明过程除了建立起交互双方的信任关系外,保护参与方的隐私是远程证明被广泛接受的必要条件之一。基于属性的远程证明应运而生,并成为广泛接受方案。但是通过分析,基于属性的证明方式并不是天然地具有隐私保护能力。基于属性证明的隐私保护能力与基于属性证明的构建以及恶意验证方用于获取证明平台配置隐私的方法和以及这些方法的能力有关。提出了几种可资验证方利用的配置隐私分析方法,讨论它们的特点和局限,为进一步研究基于属性的证明提供参考。Remote attestation is an important technique for establishing trust in distributed or network systems and the key part of the trusted computing proposed by TCG.In addition to establishing trust among parties involved in the attesta-tion process, protecting the privacy of participating parties is one of the necessary conditions that remote attestation is widely accepted by stake-holders.Property-based attestation is proposed and a widely accepted scheme for this purpose.However, property-based attestation doesn't intrinsically preserve the configuration privacy of attestation platform.In fact, the capability of protecting privacy is relevant to the construction of property-based attestation and the measure-ments that the adversary can take to compromise such protection.Three possible measurements were presented that a ma-licious verifier could take to analyze the configuration privacy of the attestation platform.And then the characteristics and limitations of these methods were discussed, which offered reference for the further research on property-based remote attestation.

关 键 词：可信计算 远程证明 基于属性的证明 配置隐私 隐私分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]