TPM 2.0策略授权机制的安全缺陷及其改进方案

Security Risk and Improved Scheme for TPM 2.0 Policy Authorization

分析了可信平台模块TPM 2.0策略授权方式的安全性,开发了专门的灰盒测试系统对TPM 2.0的安全性进行了一系列测试,发现它存在两个潜在的安全隐患:信息泄露安全隐患和授权认证安全隐患.给出了利用该安全隐患暴力破解策略授权的实现方法并提出了一种基于共享密钥的授权会话加解密方案来对整个策略授权过程进行改进.实验结果表明,该改进方案可以很好的保证策略授权过程的安全性.

The security of trusted platform module TPM 2.0 policy authorization was analyzed. By using a spe cialized tools we designed , a series of gray-box testing was made, and two security risks information leakage and au thentication risk were found. The attack method and an improved scheme based on shared key encryption were given. The experimental results show that the improved scheme can ensure the process of policy authorization security.