Trusted computing platform attribute verification method based on ring signature

Abstract

The invention discloses a trusted computing platform attribute verification method based on a ring signature. The method comprises the following steps: a computing platform A and a computing platform B are set as two parts performing platform attribute automation verification, an attribute P in an attribution certificate corresponds to platform configurations C<1>, C<2>... C<N>, and the computing platform A selects a computing platform of other t-1 embedded trusted chips to, together with the computing platform A, form a ring; a configuration information abstract value C<r> (1<=r<=N) stored in a corresponding PCR is extracted by an embedded trusted chip A of the computing platform A, private information is randomly selected by the trusted chip A to be multiplied by A, and an attribute hidden value y=x<-1>(H<1>(P, C<1>,C<2>...C<N>)+dr)mod n and a signature final value are computed; and an interaction verification stage, that private information x selected by a resource provider, i.e., the computing platform B and a private key d simultaneously participate in operation and whether the computing platform A has the attribute P is verified, is performed. Remote anonymity of computing platform verification can be met, a privacy is protected, and verification efficiency of the trusted computing platform is also improved.

Description

technical field [0001] The invention relates to a method for verifying attributes of a trusted computing platform based on a ring signature, and belongs to the technical field of information security. Background technique [0002] Since the internal network of the power grid system has high requirements on the computing platform, after installing various applications and security protection software, the installed software needs to be reinforced twice before the installed software can be allowed to access the internal network. Therefore, internal Attribute certificates, which are jointly issued by trusted chips and their hosts, are used to illustrate that the current platform has certain attributes, rather than directly considering external attribute certificates (certificates issued directly by the manufacturer that produces the software). [0003] For internal attribute certificates, since the configuration information of the real reporting platform is required, it must be...

AI Technical Summary

Problems solved by technology

However, this proof method exposes the specific configuration information of the local platform, making the platform more vulnerable to attacks

In addition, this proof method requires zero-knowledge proof, and the implementation efficiency of zero-knowledge proof is low, so it will affect the verification efficiency of trusted computing platforms

Images