Generation methods and devices of user root key and user key for trusted computing platform

Abstract

The embodiment of the invention provides a generation method and a device of a user root key and a user key for a trusted computing platform, which can enhance the security of a trusted computing group authorization protocol. The method comprises the following steps that: an owner of a trusted platform module receives a user root key generation request made by a trusted platform module user; the trusted platform module is interacted with the owner of the trusted platform module to generate a user root key of the trusted platform module user and authorization data of the user root key; and the owner of the trusted platform module sends the user root key of the trusted platform module user and the authorization data of the user root key to the trusted platform module user. The method provided by the embedment of the invention ensures the particularity, privacy and independence of the user root key, even if the user (including an attacker) knows the authorization data of a storage root key, the user cannot create a user root key without the authorization of the owner of the trusted platform module, and thus the resources of the trusted platform module cannot be illegally occupied.

Description

technical field [0001] The invention relates to the field of information security, in particular to a trusted computing platform user root key and user key generation method and device. Background technique [0002] Trusted Computing Group (Trusted Computing Group, TCG) defined trusted computing technical specifications mainly include object-independent authorization protocol (Object-Independent Authorization Protocol, OIAP) and object-specific authorization protocol (Object-Specific Authorization Protocol, OSAP) and other authentication / license agreement. The authorization protocols in the trusted computing specification can guarantee the integrity of the session, and protect some key data based on the authorization password, such as the confidentiality of the authorization data of the newly created key and the protection data of the encapsulated data. The security of the authorization protocol depends on the confidentiality of the authorization data. If the attacker know...

AI Technical Summary

Problems solved by technology

The security of the authorization protocol depends on the confidentiality of the authorization data. If the attacker knows or guesses the authorization data, the authorization protocol will have no security or the security will be greatly threatened.

Images