• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>European Symposium on Research in Computer Security(ESORICS 2004); 20040913-15; Sophia Antipolis(FR) >Better Privacy for Trusted Computing Platforms
【24h】

Better Privacy for Trusted Computing Platforms

机译：可信计算平台的更好隐私

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

The trusted computing group (TCG) specified two protocols that allow a trusted hardware device to remotely convince a communication partner that it is indeed a trusted hardware device. In turn, This enables two communication partners to establish that the other end is a secure computing platform and hence it is safe exchange data. Both these remote identification protocols provide some degree of privacy to users of the platforms. That is, the communication partners can only establish that the other end uses some trusted hardware device but not which particular one. The first protocol achieves this property by involv-ing trusted third party called Privacy CA in each transaction. This party must be fully trusted by all other parties. In practice, however, this is a strong requirement that is hard to fulfill. Therefore, TCG proposed a second protocol called direct anonymous attestation that overcomes this drawback using techniques known from group signature schemes. However, it offers less privacy than the one involving the Privacy CA. The reason for this is that the protocol needs to allow the verifier to detect rogue hardware devices while before this detection was done by the Privacy CA. In this paper we show how to extend the direct anonymous attestation protocols such that if offers the same degree of privacy as the first solution but still allows the verifier to rogue devices.
机译：可信计算组（TCG）指定了两个协议，这些协议允许可信硬件设备远程说服通信伙伴它确实是可信硬件设备。反过来，这使两个通信伙伴可以确定另一端是安全的计算平台，因此可以安全地交换数据。这两种远程识别协议都为平台的用户提供了一定程度的隐私。即，通信伙伴只能确定另一端使用某些受信任的硬件设备，而不能使用哪一个特定的硬件设备。第一个协议通过在每笔交易中涉及称为“隐私CA”的受信任第三方来实现此属性。此方必须得到所有其他方的完全信任。但是，实际上，这是一个很难满足的强烈要求。因此，TCG提出了第二种协议，称为直接匿名证明，该协议使用组签名方案中已知的技术克服了这一缺点。但是，与隐私CA相比，它提供的隐私较少。这样做的原因是，在隐私CA进行检测之前，协议需要允许验证者检测恶意硬件设备。在本文中，我们展示了如何扩展直接匿名证明协议，以便提供与第一个解决方案相同的隐私度，但仍允许验证者对设备进行欺诈。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号