Authority principal method based on trusted computing platform

Abstract

The invention relates to a method for using key to represent agency, based on confidence calculate platform, wherein said platform comprises confidence hardware and software protocol stacks; the confidence hardware stores evidence data, root key and counter list with at least one counter; the software protocol stack stores key list with at least one key and the agency list with at least one agency. And the method comprises that: inputting at least one agency, relative key agency command and access command of key into confidence hardware; the hardware uses root key to analyze the key, extractskey access command, to check the input access command; when the input access command is right, relating the agency and key; uses root key to encrypt the agency command, inputs it into agency, uses evidence data to calculate integrality and inputs it into agency, to generate authorized agency; feedbacks said agency to software protocol stack, to be input into agency information list.

Description

technical field [0001] The invention relates to authority delegation, in particular to a authority delegation method based on a trusted computing platform, which can improve the security and privacy of delegation. Background technique [0002] At present, in various applications with authorization management, in order to realize authorization delegation, a common system including users, roles, and passwords, or PMI (Privilege Management Infrastructure, authorization management infrastructure) is adopted. The disadvantage of the above-mentioned common system is that it needs to be developed separately for each application and the security is relatively weak. That is, all kinds of authorized data are protected by pure software. The disadvantage of the above-mentioned PMI is that a complete PKI (Public Key Infrastructure, public key infrastructure) and PMI system architecture need to be built, resulting in complicated deployment, large investment, and high requirements on the ...

AI Technical Summary

Problems solved by technology

The disadvantage of the above-mentioned PMI is that it needs to build a complete PKI (PublicKey Infrastructure, public key infrastructure) and PMI system architecture, resulting in more complicated deployment, large investment, and high requirements on the network

Therefore, PMI is too costly to implement for small and medium-sized applications, especially desktop applications.

Images