基于可信计算的Ad Hoc网络直接匿名证明  

Direct Anonymous Attestation to Ad Hoc Networks Based on Trusted Computing

作　　者：张弢[1] 任帅[2] 张德刚 

机构地区：[1]长安大学电子与控制工程学院,陕西西安710064 [2]长安大学信息工程学院,陕西西安710064 [3]云南电力试验研究院(集团)有限公司电力研究院,云南昆明650217

出　　处：《计算机技术与发展》2014年第4期147-150,共4页Computer Technology and Development

基　　金：中央高校基础研究项目(2013G1240118);国家"863"高技术发展计划项目(2012AA112312);交通运输部项目(2012-364-208-600;2012-364-208-200;201231849A70);吉林省外国专家局项目(2012-7-102-2)

摘　　要：现有的Ad Hoc网络完整性认证存在固有的缺陷,且用于传统固定网络的安全认证策略不能适用于Ad Hoc网络完整性认证。因此,文中在研究Ad Hoc网络特点的基础上,将可信计算和直接匿名证明理论引入Ad Hoc网络认证环节中。Ad Hoc网络安全认证的关键在于对其中各个节点的安全认证,文中在对各个节点认证之前先进行优化。首先在应用硬件层面上建立可信计算平台模块,其次在软件层面上建立直接匿名证明模块,从而实现Ad Hoc网络节点认证环节的优化。实际应用表明,文中提出的方案有效解决了Ad Hoc节点的安全性问题,降低了Ad Hoc网络受攻击的可能性。The integrity authentication of the existing Ad Hoc networks has inherent defects, and the traditional fixed network security strategy is not appropriate for the integrity authentication of Ad Hoc networks. Therefore, based on the study about the features of Ad Hoc networks,introduce trusted computing and direct anonymous attestation theory into authentication of Ad Hoe networks. The crux of the security authentication for Ad Hoc networks is the security authentication for every node. Optimize the nodes before the authentication. Firstly, constitute trusted computing module on hardware level, and direct anonymous attestation module on software level. The application shows that this scheme can effectively solve security issues of the Ad Hoc nodes,thus declining the attacked possibility of the Ad Hoc net- works.

关 键 词：可信计算 Ad Hoc网络 直接匿名证明 零知识证明 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]