一种基于用户属性的远程证明方案  

A Scheme of Remote Attestation Based on User Attributes

作　　者：张晓伟[1] 王峥[1] 陈永乐[1] 

机构地区：[1]太原理工大学计算机科学与技术学院,太原030024

出　　处：《太原理工大学学报》2015年第2期188-191,195,共5页Journal of Taiyuan University of Technology

基　　金：国家自然科学基金项目:(61401300);山西省高等学校科技创新项目(2014124)

摘　　要：针对现有的远程证明方案中安全性差、不能反映用户特征的问题,提出了一种基于用户属性的远程证明方案。该方案在证据的可信生成与可信验证中用到了基于口令的加密(Password Based Encryption),利用可信平台模块模拟器(TPM Emulator)、Java TCG Software Stack来构建实验平台。实验结果表明,基于用户属性的远程证明方案是可行的,相对于AES加密的远程证明方案,一方面提高了证据的可信性与传输的安全性,另一方面能够反映出用户特征。In order to overcome the poor safety incapability in reflecting user characteristic in remote attestation,as existed in current remote affestation,a scheme of remote attestation based on user attributes was proposed. In the process of generating trusted evidence and credible verification,the scheme uses password for encryption and decryption. TPM Emulator and Java TCG Software Stack were used to build experimental platform. The experimental results show that the scheme is feasible. Compared with the remote attestation based on AES,it can not only strengthen the security of the transmission, but also reflect user characteristic.

关 键 词：可信计算 远程证明 口令加密 用户属性 可信平台模块 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]