基于可信计算的Ad hoc网络认证方案  

Trusted Computing-based Authentication Scheme for Ad hoc Networks

作　　者：胡荣磊[1] 李然[2] 李兆斌[1] 方勇[1] 

机构地区：[1]北京电子科技学院通信工程系,北京100070 [2]西安电子科技大学计算机学院,西安710071

出　　处：《计算机工程》2010年第12期146-148,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(60672102);北京电子科技学院重点实验室基金资助项目(YZDJ0710;YZDJ0805)

摘　　要：针对在Ad hoc网络平台完整性证明方面存在的缺陷,基于可信计算技术提出一种认证方案。节点间通过直接匿名认证协议进行认证,利用平台配置寄存器值和存储测量日志进行平台证明,确认当前平台状态以及完整性,确保通信过程中节点平台的可信,消除了因平台完整性破坏带来的安全隐患,并且满足Ad hoc网络的动态拓扑和自组织特性。According to the defects of the proof of platform integrity in Ad hoc networks, a new authentication scheme is proposed based on trusted computing technology. Nodes authenticate each other through direct anonymous attestation protocol. The contents of platform configuration register and the stored measurement log are used to confirm the current status and integrity of platform which ensures the trust of the platform, and eliminates the security risk brought by damage of platform integrity. This scheme satisfies the dynamic topology and self-organization of Ad hoc networks.

关 键 词：AD HOC网络 可信计算 直接匿名认证 平台完整性 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]