Research And Design Of Direct Anonymous Attestation Scheme

In the field of information security, Trusted Computing attracts attentions from more and more reseachers. The remote attestation is a key technologie for Trusted Computing. A requester's identity and platform configuration are confirmed by verifier in a remote attestation process. Trusted Computing Group (TCG) deems that privacy protection must be taken into account for remote attestation, in the TPM specification version 1.2, TCG has released the remote direct anonymous attestation (DAA) scheme. However, the scheme is inefficient and only suitable for single trusted domain network environment.Firstly, XTR public key cryptosystem is studied, and the characteristics of XTR are analyzed in this paper, Zero-knowledge proof scheme and identity authentication scheme are designed based on XTR.Secondly, by using the two previous schemes, a new DDA scheme is proposed based on XTR. Under the same security condition, the new DDA scheme reduces the complexity of computing time and space, also it improves the efficiency.Finally, for practical application of trusted computing, a remote identity direct anonymous attestation scheme is proposed for different trusted domain, the direct anonymous attestation problems in different trusted domain are solved.