可信移动平台身份管理框架  

Identity management framework based on trusted mobile platform

作　　者：李建[1,2] 何永忠[3] 沈昌祥[4] 周正[5] 王青龙[3] 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450002 [2]广西军区司令部,南宁530021 [3]北京交通大学信息安全体系结构研究中心,北京100044 [4]北京工业大学计算机学院,北京100022 [5]海军工程大学电气与信息工程学院,武汉430033

出　　处：《计算机应用研究》2008年第12期3710-3712,3734,共4页Application Research of Computers

基　　金：国家"863"计划资助项目(2006AA01Z440;2007AA01Z40)

摘　　要：针对网络用户身份管理难题及现有的身份管理方案存在的不足,基于可信移动平台完整性校验、保护存储、域隔离和访问控制以及远程平台校验等安全特性,提出了可信移动平台身份管理方案和协议;构建了对应于口令、证书、指纹等认证方式的身份矩阵;实现了多种方式的身份认证、身份认证审计记录,主密钥、审计密钥、平台AIK私钥的加密存储,以及移动平台的可信验证、加密身份的还原和服务提供者身份标志的查找定位,并实现了身份信息和认证数据的加密传输;进行了安全性分析,结果表明该方案在保护用户身份信息安全的前提下,大大减轻了用户身份管理的负担,并具有一定的扩展潜力。According to the fact that it＇ s becoming more and more difficult for network users to manage their identity and there are some faults in current identity management scheme. Based on the security characteristics such as integrity verification, protect storage, domain isolation, access control and remote platform checking that trusted mobile platform possess, this paper put forward identity management scheme and protocol that relied on trusted mobile platform, constructed identity matrix which corresponded to passwords, certificates, fingerprints, realized multimode identity authentication and encryption storage for identity, audit record about identity authentication, master keys, audit key, platform AIK private key, trusted verification for mobile platform, restored from encrypted identity, searched position of service providers identity, encrypted transmission of identity information and authentication information, security analysis had been done. The result indicates that the scheme lighten the user＇s burden for their own identity management greatly under the circumstance that protect information security of user identity. At the same time, the scheme has some potentials of extension.

关 键 词：身份管理 完整性校验 平台校验 可信移动平台 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]