Anonymous authentication algorithm for remote authentication between credible platforms

Abstract

The invention provides an anonymous authentication algorithm for remote authentication between credible platforms. By the anonymous authentication algorithm provided by the invention, good anonymity performance is obtained, the identity information of a transmitter is authenticated and the privacy information of the transmitter is protected, a power exponent calculation is utilized, the frequency of the calculation is a constant, so the frequency of encryption and decryption operation is reduced, the scheme efficiency cannot be influenced by the scale expansion of a signature ring, and the complexity of the algorithm can be relatively accepted by the credible platforms. Therefore, requirements on direct and anonymous authentication between credible platforms can be basically met.

Description

Technical field: [0001] The invention relates to the field of information security, in particular to an anonymous authentication algorithm for remote certification of a trusted platform. Background technique: [0002] Remote attestation is one of the fundamental features of trusted computing. Trusted computing can realize the security verification of access terminals through remote attestation. According to the specification document proposed by the Trusted Computing Group, the server realizes the proof by checking the integrity of the remote computer platform to determine the trust. However, when the server performs security detection, the access terminal must provide various configuration information of the platform, which easily violates the privacy of the terminal user. In consideration of this, Trusted Computing Organization introduces AIK (Attestation Identity Keys) to protect the signature key EK (Endorsement Key) of the Trusted Platform Module so as to hide the ide...

AI Technical Summary

Problems solved by technology

[0015] This zero-knowledge proof authentication scheme satisfies the authentication requirements of trusted computing and the confidentiality requirements of user information. However, due to its complex calculation process, there are a large number of modular exponentiation operations, and it involves many large numbers far exceeding 1024 bits. However, the trusted platform module has limited resources and limited computing power, and generally can only support calculations up to 1024×1024

Even if some accelerated signature or decryption algorithms are used, it is still difficult to reduce all large numbers to less than 1024 bits. As far as the current technical level is concerned, in the absence of breakthroughs in the development of trusted platform module hardware chips, based on zero-knowledge authentication almost impossible to implement

[0016] To sum up, the existing authentication technologies are difficult to meet the anonymous authentication requirements between trusted platforms.

Images