State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, China

---

Abstract—Trusted computing platforms have been proposed as a promising approach to enhance the security of general-purpose computing systems. Direct Anonymous Attestation(DAA) is a scheme that allows a Trusted Platform Module (TPM) which is the core component of the trusted computing platform to remotely convince a communication partner that it is indeed a Trusted Platform Module while preserving the user’s privacy. The first DAA scheme developed by Brickell which is relatively complex and time-consuming was adopted by the current TPM specification.As the ECC cryptosystem is more efficient compared to the RSA cryptosystem, more and more cryptographic device is based on the ECC cryptosystem, so it is anticipated that the TPM will be based on the ECC in near future. In this paper, we propose a new direct anonymous attestation which is suitable for the ECC-based TPM. This paper presents an efficient construction that implements all anonymous authentication features specified in DAA. The proposed scheme has the best computational performance of all the DAA schemes up to now. The new DAA scheme is provably secure in the random oracle model under the q- SDH and the decisional Diffie-Hellman assumption.

Index Terms—Direct Anonymous Attestation; Trusted Computing Platform;Trusted Platform Module; ECC

[PDF]

Cite: CHEN Xiaofeng, FENG Dengguo, "Direct Anonymous Attestation for Next Generation TPM," Journal of Computers vol. 3, no. 12, pp.43-50, 2008.