一种改进的组签名平台配置远程证明机制  

An Improved Platform Configuration Remote Attestation Mechanism of Group Signatures

作　　者：李宏宇 付东来[2] 

机构地区：[1]山西省财税专科学校网络中心,太原030024 [2]中北大学电子与计算机科学技术学院,太原030051

出　　处：《计算机工程》2014年第5期99-102,共4页Computer Engineering

基　　金：山西省科技攻关计划基金资助项目(20090322004);中北大学自然科学基金资助项目(2013)

摘　　要：针对远程证明效率低、隐私保护能力及可伸缩性差的问题,提出一种基于可动态调整的非平衡Merkle哈希树的平台配置远程证明机制。借鉴Merkle哈希树远程证明方案,考虑可信实体完整性度量值被请求的概率,综合利用组签名技术和动态Huffman树构造算法的优势,不仅能大幅减少可信实体度量日志的存储空间,屏蔽具体的可信实体的哈希值,而且缩短认证路径长度。给出具体的软件分发算法、完整性度量和验证算法,并从验证效率、隐私保护和可伸缩性3个方面分析算法的优势。分析结果表明,该机制可提高远程证明算法的效率、隐私保护能力及可伸缩性。In order to improve efficiency, privacy protecting and scalability of remote attestation, a new method to measure the integrity of trusted entities is proposed. The method based on Remote Attestation based on Merkle Hash Tree（RAMT） takes the frequency of trusted entities into account. It leverages multiple techniques including group signatures and dynamic Huffman algorithms. Thus, it reduces dramatically storage space to store measurement log of executables and hides information of specific software and cuts down a length of the path of verification. These algorithms including software distribution, integrity measurement and verification are given and their advantages are described from three aspects including verification efficiency, privacy protection and scalability. Analysis shows the ability of the protection privacy is enhanced. The efficiency and the scalability of the remote attestation are improved highly.

关 键 词：可信计算 远程证明 组签名 MERKLE HASH树 隐私保护 可伸缩性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]