一种可信移动平台的多组件证明方案  

Multi-component attestation scheme on trusted mobile platform

作　　者：李晓策 潘晓中[1,2] 陈飞[1,2] 李宁波 

机构地区：[1]网络与信息安全武警部队重点实验室,陕西西安710086 [2]武警工程大学电子技术系,陕西西安710086

出　　处：《电子技术应用》2016年第10期65-68,共4页Application of Electronic Technique

基　　金：国家自然科学基金资助项目(61402531)

摘　　要：分析了现有远程证明方案在移动平台中证明效率低、难以实际应用的问题,提出了一种基于可信执行环境的多组件证明方案。方案基于当前广泛使用的ARM Trust Zone技术,能够在大多数移动平台应用,并不需要作任何硬件的改动。并且针对移动平台证明特点使用超递增序列对组件签名方案进行优化,能够高效地对多个组件同时进行证明。实验结果表明,方案证明效率与组件数量无关,组件数量较多时与属性环签名相比效率提升明显,对移动平台正常运行基本没有影响。Focused on the issue that the remote attestation is expensive and not effective on the mobile platform to apply, a remote attestation based on Trusted Execution Environment( TEE) is proposed. The scheme is based on ARM TrustZone technology which is widely used on mobile platform, and could be applied to mostly mobile device without any hardware modify. Making use of the performance advantage on TEE, signature scheme optimized by super increasing sequence was used on to increase scheme efficien-cy. The experimental result shows that scheme is more efficient than the remote attestation based on attribute- based signature, espe-cially in numerous components.

关 键 词：可信计算 远程证明 移动平台 TRUST ZONE 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]