可信计算环境下基于TPM的认证密钥协商协议  

TPM-based authenticated key agreement protocol in trusted computing

作　　者：王海燕[1] 吴振强[1] 种慧芳[1] 蒋李[1] 

机构地区：[1]陕西师范大学计算机科学学院,西安710062

出　　处：《计算机工程与应用》2010年第35期115-118,共4页Computer Engineering and Applications

基　　金：国家自然科学基金(No.60633020);西安电子科技大学计算机网络与信息安全教育部重点实验室开放课题(No.2007CNIS-06)~~

摘　　要：基于身份的认证密钥协商协议存在密钥托管I、D管理I、D唯一性和私钥的安全分发等问题,目前的可信计算技术为此提供了很好的解决方案。利用TPM平台中EK和tpmproof唯一性的特点,结合McCullagh-Barreto认证密钥协商协议思想,提出了一个在可信计算环境下基于TPM的认证密钥协商协议,该协议较好地解决了上述基于身份的密钥协商协议所存在的问题。用CK模型对所提协议进行了安全性分析,结果表明该协议具备已知密钥安全性,完善前向保密性及密钥泄露安全性等CK安全模型下相应的安全属性。There are some inherent problems in the identity-based authenticated key agreement protocol：key escrowi,dentity management,unique identity values and secure channel to distribution private key.At present,trusted computing technology provide a good method to solve these problems.With the characteristics of EK and tpmproof keys in the TPM platformc,om-bining with McCullagh-Barreto authenticated key agreement protocolt,he paper proposes a TPM platform based authenticated key agreement protocol in trusted computingt,he protocol provide a better solution to the above mentioned problems of the identity-based authenticated key agreement protocol.Especiallyt,he security properties of the protocol are analyzed in detail in Canetti-Krawczyk model.The results indicate that the protocol has the corresponding security attributes in CK security model such as known key security,perfect forward secrecy,key-compromise impersonation.

关 键 词：可信计算 密钥协商协议 认证密钥协商 CANETTI-KRAWCZYK模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]