可信计算中对象访问授权协议的分析与改进  

ANALYSIS AND IMPROVEMENT ON OBJECT ACCESS AUTHORIZATION PROTOCOL IN TRUSTED COMPUTING

作　　者：罗芳[1] 徐宁[1] 周雁舟[1] 刘雪峰[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机应用与软件》2008年第12期30-32,67,共4页Computer Applications and Software

基　　金：国家"863"计划基金资助项目(2006AA01Z433)

摘　　要：可信平台模块的对象访问授权协议是可信平台模块安全的基础。依据可信计算对象访问授权模型,在对OIAP和OSAP协议的特点及所存在的安全漏洞进行分析的基础上,提出了一个改进的对象访问授权协议。通过对改进协议的形式化分析和模拟实现,证明该协议可以抵抗外部调用者的替换攻击和中间人攻击。此外,通过在协议中引入对称密码算法,有效地解决了外部调用者和TPM之间授权认证和传输会话的机密性保护问题,在一定程度上提高了作为TCB信任根的TPM模块的安全性。Object access authorization protocol of trust platform model （TPM） is the base of TPM＇ s security. Based on the object access authorization model for Trusted Computing, this paper introduces the analysis of the characteristics of OIAP and OSAP protocols and their vulnerability, and puts forward an improved object access authorization protocol. Through the formal analysis and simulated implementation, this protocol can be proved to resist the replacement attack from external caller and man-in-the-middle attack. In addition, by introducing symmetric encryption algorithms, it solves the confidentiality problems of authentication and data transmission between caller and TPM, so it has improved to some extent the security of TPM model which is the base of TCB.

关 键 词：可信计算 授权协议 会话 TPM 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] F471.266[自动化与计算机技术—计算机科学与技术]