用TPM增强Kerberos协议的安全性  

Improving kerberos protocol security with TPM

作　　者：刘平[1] 池亚平[2] 方勇[2] 

机构地区：[1]西安电子科技大学,陕西西安710071 [2]北京电子科技学院

出　　处：《计算机工程与设计》2007年第18期4351-4353,共3页Computer Engineering and Design

基　　金：国家自然科学基金项目(60472082)。

摘　　要：根据Kerberos协议基本原理和可信计算的特点,提出把TPM(可信平台模块)加入到Kerberos认证系统中,在用户请求认证的过程中对终端平台的完整性进行测量,并分析此平台的可信性,从而确保加入该Kerberos域的终端平台安全可靠。通过在Kerberos认证中心加入TPM增强Kerberos认证协议所信赖的可信第三方的安全性。这样,确保整个Kerberos认证系统安全可靠,并通过Kerberos的跨域认证实现基于Kerberos认证的可信网络。It is presented that install trusted platform module （TPM） in the kerberos authentication system based on the characteristics of the kerberos protocol principle and trusted computing. The TPM measures the integrity of the terminal user＇s platform during the process of the user＇s authentication request. Then, the trust of the platform is analyzed. In this way, it is ensured that the platforms in this kerberos realm are safe and trusted. In addition, install trusted platform module in the center of kerberos authentication, which assures the security of the third trusted part. In this way, it is ensured that the whole kerberos authentication system is safe, and a trusted network will be realized with the technology of Kerberos cross-realm authentication.

关 键 词：KERBEROS认证协议 可信计算 可信平台模块 可信网络 可信第三方 

分 类 号：TN915.08[电子电信—通信与信息系统]