可信DRM中直接匿名认证的应用研究

Application of Direct Anonymous Attestation in Trusted DRM

数字版权管理(DRM)技术一直致力于数字内容的保护,特别是防止售后非法使用.而所依靠的密码学保护措施很容易被攻击和破解.为了在硬件方面加入保护,可信DRM引入了TPM安全芯片,借助TPM在身份认证、许可授权等方面加强保护.为了解决身份认证时用户隐私泄露的问题,可信DRM采用了直接匿名认证协议.在此基础上提出了基于零知识认证和ElGamal算法的双随机数签名的改进方案,并介绍了该方案在可信DRM中是如何应用的.最后经过分析得出该方案在安全性和匿名性方面都有所提高.

Digital Rights Management（DRM）is a technology to protect digital contents from illegal usages after sale. DRM depends on soft cryptography protection,which is a weak protection against hackers. Trusted DRM applied TPM security chip to improve protection in terms of hardware for authentication,licensing and other aspects. To overcome the problem of user privacy,trusted DRM used direct anonymous authentication protocol. On this basis,this article proposed an improved protocol based on zero-knowledge proof and ElGamal signature algorithm of double random numbers, and then described its application in trusted DRM. The proposed technique could improve security and anonymity in DRM.