Attestation proxy party-supported remote attestation model and its secure protocol
Attestation proxy party-supported remote attestation model and its secure protocol
复制标题
DOI：
--
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
Ma Jian-feng
中科院分区：
文献类型：
--
作者：
Ma Jian-feng
针对现有的远程证明模型存在终端平台基本配置细节和安全属性特征的隐私保护问题，提出了一种具有委托模式的认证代理方支持的远程证明模型及其安全协议AP2RA，引入可信第三方接受证明方的证明委托，在终端上实现硬件和软件的完整性和安全性证明，并进一步可信地报告当前平台状态的布尔值，从而改进了基于双方的远程证明模型，有效地保护了被证方的平台隐私。该方法能够抵抗被证明方的消息重放攻击和合谋攻击，以及追踪终端平台对APP发起的攻击，适用于可信网络中的资源分发和信息共享。
Since existing remote attestation models lead to an issue of privacy protection of basic configuration details and security attribute features of the terminal platform,an Attestation Proxy Party-supported Remote Attestation(abbr.AP2RA) model and its secure protocol,which have a delegation mode,are presented.The Trusted Third Party is introduced to accept an attestion delegation from the Attestor Party,implements integrity and security attestation of hardware and software on the terminal,and further trustworthily reports the boolean value of the current platform status,thus improving the remote attestation model based on two parties,as well as effectivly protecting the platform privacy of the Attested Party.Moreover,compared with other approaches,the proposed approach is capable of resisting against the message replay attack and collusion attack from the Attested Party together with the tracing terminal platform sponsoring attack on APP,so that it is suitable for resource dissemination and information sharing in the trusted network.