可信计算平台模块密码机制研究  

Research on cryptology mechanism of trusted computing platform module

作　　者：罗捷[1] 严飞[1] 余发江[1] 张焕国[1] 

机构地区：[1]武汉大学计算机学院,武汉430072

出　　处：《计算机应用》2008年第8期1907-1911,1915,共6页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60673071);国家863计划项目(2006AA01Z442,2007AA01Z441)

摘　　要：可信计算已经成为世界信息安全领域的新潮流。介绍了可信计算平台模块(TPM)的基本体系,分析了它的密码机制,指出了其密码机制上的特色与不足。针对现有可信计算组织(TCG)规范中密钥管理授权机制比较复杂的缺点,结合OIAP与OSAP的思想,给出了一种授权复用的技术方案与授权协议,并给出了协议的安全性证明。Trusted computing is a new tendency in the field of data security. The basic architecture of trusted computing platform module was introduced, and its cryptology mechanism was discussed. Through analyzing the cryptology mechanism of TCG, the advantages and disadvantages was pointed out. Aiming at the problem that the key management and authentication of TCG specifications were very complicated, a scheme of multiusing authentication data and a authentication protocol were proposed, which colligated OIAP and OSAP, and the security proof of this protocol was given.

关 键 词：可信计算 可信计算平台模块 密码 密钥管理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]