基于模块属性的远程证明协议

Protocol of remote attestation based on module property

为了解决当远程证明方案中安全性差、效率较低的问题,提出了一种模块级的远程证明协议。在构建模块属性签名时采用签密,减少了属性证书的生成时间;在验证属性证书时采用了分级验证的方法,提高了效率。通过协议的模型实例验证了协议的可行性。实验结果表明,该方案可以快速生成可信平台中各模块的属性签名,分级验证有效减少了远程证明方案的运行时间,提高了远程证明的效率。

To solve the poor security, low efficient in remote attestation program. A modulelevel property attestation protocol is proposed. The signcryption is used to build the module property signature, which can reduce the time of module property sig nature to be built. The validation of the method of classification is used in the validation of attribute certificates which can im prove the efficiency. Finally a model instance is presented to verify the feasibility of the protocol. Experiments show that the pro gram can quickly generate the module property signature and the signature of the subgroup in trusted platform, and effectively reduce the running time of the remote attestation program and improve the efficiency of the remote attestation.