An Authorization Protocol for Trusted Platform Control Module

Abstract

The invention relates to an authorization protocol for a trusted platform control module. A method comprises the steps that an external caller sets a flag ifCreateKey, and an AP session between the external caller and the trusted platform control module is established; the external caller calls the AP session and performs a command TPCM_Example of the trusted platform control module, if the attribute value of the ifCreateKey is FLASE, integrity verification is carried out on interaction data between the external caller and the trusted platform control module by employing authData, and if the attribute value of the ifCreateKey is TRUE, encryption / decryption and integrity verification are carried out on interaction data between the external caller and the trusted platform control module by taking a temporary sessionKey as a key; and the external caller performs a TPCM_AP_TERMINATE command, and the AP session is finished. According to the method provided by the invention, three kinds of different application scenes such as object-independent, object-specific and authorization data inplant can be satisfied. The integrity and confidentiality in the data transmission process can be ensured. Access control can be carried out on an external entity. The external entity is prevented from carrying out unauthorized access and usage on sensitive data in the TPCM.

Description

technical field [0001] The invention relates to the field of information security, in particular to an authorization protocol for a trusted platform control module. Background technique [0002] TPM is a trusted computing chip designed by TCG International Trusted Computing Alliance, and its authentication mechanism is similar to that of my country's TPCM. In order to achieve authorized access to resources, TPM executes a series of well-designed protocols to resist various forms of attacks, namely authorization protocols. The purpose of the authorization agreement is to prove to the TPM that the visitor has the right to access this object through the specified function. Authorization is mainly for TPM commands that may affect security, privacy, or expose platform secrets. The basis for verification comes from a shared secret - authorization data (AuthData). [0003] There are three authorization protocols that securely transfer authorization data from the visitor to the T...

AI Technical Summary

Problems solved by technology

[0012] The original AP protocol framework is similar to the OSAP protocol, which is related to the entity. Every time a session is created, the authorization data of the entity needs to be used to generate the session temporary key, which cannot be reused between different entities.

This makes resource utilization inefficient in the application scenarios facing the OIAP protocol, which is a disadvantage for chips with scarce resources.

Images