基于TPM的强身份认证协议研究  

Research on TPM-based Strong ID Authentication Protocol

作　　者：徐贤[1] 龙宇[2] 毛贤平[2] 

机构地区：[1]华东理工大学计算机科学与工程系,上海200237 [2]上海交通大学计算机科学与工程系,上海200240

出　　处：《计算机工程》2012年第4期23-27,共5页Computer Engineering

基　　金：国家自然科学基金资助项目(60903020;60903189;60773094);国家"863"计划基金资助项目(2008AA01Z403);上海市曙光计划基金资助项目(07SG32)

摘　　要：根据可信计算领域中对身份认证的要求,提出一种基于TPM的强身份认证协议。介绍可信平台模块架构,给出其支持的密钥类型,按照进程理论建立协议模型,阐述协议扩展方案,包括引入PCR挑战、实现跨平台认证,并采用网络开发技术加以实现。实验结果表明,该协议可有效对用户身份进行验证。In terms of the requirement of ID authentication in trusted computing filed, this paper proposes a Trusted Platform Module（TPM）- based strong ID authentication protocol. TPM is reviewed as well as the types of keys supported and their relationship. A mathematical model of the protocol using the formal method of process theory is designed. The extension of the protocol is discussed, including Platform Configuration Register（PCR） challenging and implementing platform independence. An application scenario of the protocol by network development technology is implemented. Experimental results show the protocol can authenticate users＇ ID effectively.

关 键 词：可信平台模块 数字签名 公钥加密 JAVA平台 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]