A Remote Attestation Method Applicable to Emergency Rescue Platform

Abstract

The invention provides a remote proving method applicable to emergency rescue platform. The remote providing method comprises the steps that a proving terminal sends an identity authentication request to a cluster administrator; the cluster administrator verifies the identity of the proving terminal; if passing the verification, the proving terminal acquires measurement information of a platform where the proving terminal is positioned, signs the measurement information by adopting a cluster signing scheme and sends the signed measurement information to an inquiry terminal; the inquiry terminal verifies whether the signature is effective according to a cluster verification scheme and inquires whether the measurement information is credible from the cluster administrator; only if the signature is effective and the measurement information is credible, the inquiry terminal confirms that the proving terminal is credible. The remote proving method has the advantages that the problem of credibility proving of a terminal can be effectively resolved, and the authenticity of data and secure transmission of the data are guaranteed; meanwhile, the remote proving method has the characteristic of proving traceability, and identity forgery attack and malicious fraud attack can be effectively resisted.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a remote certification method applicable to an emergency rescue platform. Background technique [0002] In order to enhance the security of the computer and fundamentally improve the immunity of the terminal system to viruses and Trojan horses, it is necessary to build a trusted computing environment from the aspects of computer architecture, operating system and network architecture. Trusted computing came into being and has become one of the important development directions in the field of information security. [0003] Under the vigorous promotion of the Trusted Computing Alliance (TCG), relevant industry standards such as trusted computing platforms, trusted storage and trusted networks were born. The technology is based on embedding trusted platform modules on PCs, PDAs and embedded platforms. (TrustedPlatform Module: TPM), using TPM / TPCM as the sys...

AI Technical Summary

Problems solved by technology

However, the scalability of TCG's remote attestation mechanism is poor, and it is difficult to adapt to frequent upgrades of the user's operating system and applications. Moreover, the biggest problem with the TCG scheme is that it may leak platform configuration information. The current attack plan for the TCG remote attestation scheme is Take advantage of such loopholes in the TCG scheme

[0007] The terminals in the emergency rescue platform need to transmit data in real time during the working process, and have very high requirements for the security and speed of data transmission. However, various existing remote certification schemes generally have low computing efficiency and limited security. problems, making it difficult to meet the safety and speed requirements of the emergency rescue platform

Images