a property-based attestation scheme with the variable privacy

ISCAS OpenIR

	a property-based attestation scheme with the variable privacy
	Qin Yu; Chang Dexian; Zhao Shijun; Zhang Qianying
	2011
会议名称	10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on Frontier of Computer Science and Technology, FCST 2011
会议录名称	Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on FCST 2011
页码	1616-1623
会议日期	November 1
会议地点	Changsha, China
收录类别	EI
ISBN	9780769546001
部门归属	(1) State Key Laboratory of Information Security Institute of Software Chinese Academy of Science Beijing 100190 China
摘要	The binary attestation mechanism is a basic remote attestation way for Trusted Platform Module (TPM) in Trusted Computing Group (TCG) specification. To improve the security and complexity of the binary attestation, the concept of property-based attestation (PBA) has been proposed by convincing the remote verifier that the platform satisfies the security properties without exposure of the configuration privacy. The existing PBA schemes have the disadvantage of the complex property revocations. To overcome this problem, we propose a simplified property based attestation model on the online TTP in this paper. During the attestation the prover attests the platform configuration property as well as the validation of the property certificate without verifying the property revocation. More concretely it presents a property based attestation protocol with variable privacy, which is provable security under the q-SDH assumption, discrete logarithm problem and the perfect hidden property of the commitment. We conduct the experiment to evaluate efficiency of our scheme in final. The experiment shows that the privacy parameter does not have the significant impacts on the performance, and we can adjust the parameter to make a trade-off between the performance and privacy. © 2011 IEEE.; The binary attestation mechanism is a basic remote attestation way for Trusted Platform Module (TPM) in Trusted Computing Group (TCG) specification. To improve the security and complexity of the binary attestation, the concept of property-based attestation (PBA) has been proposed by convincing the remote verifier that the platform satisfies the security properties without exposure of the configuration privacy. The existing PBA schemes have the disadvantage of the complex property revocations. To overcome this problem, we propose a simplified property based attestation model on the online TTP in this paper. During the attestation the prover attests the platform configuration property as well as the validation of the property certificate without verifying the property revocation. More concretely it presents a property based attestation protocol with variable privacy, which is provable security under the q-SDH assumption, discrete logarithm problem and the perfect hidden property of the commitment. We conduct the experiment to evaluate efficiency of our scheme in final. The experiment shows that the privacy parameter does not have the significant impacts on the performance, and we can adjust the parameter to make a trade-off between the performance and privacy. © 2011 IEEE.
关键词	Computer Privacy Embedded Systems Experiments
主办者	IEEE TCSC; Central South University; National Natural Science Foundation of China (NSFC); StFX University; Zhejiang University
语种	英语
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/16242
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Qin Yu,Chang Dexian,Zhao Shijun,et al. a property-based attestation scheme with the variable privacy[C],2011:1616-1623.