一种基于用户属性的远程证明方案

A Scheme of Remote Attestation Based on User Attributes

针对现有的远程证明方案中安全性差、不能反映用户特征的问题,提出了一种基于用户属性的远程证明方案。该方案在证据的可信生成与可信验证中用到了基于口令的加密(Password Based Encryption),利用可信平台模块模拟器(TPM Emulator)、Java TCG Software Stack来构建实验平台。实验结果表明,基于用户属性的远程证明方案是可行的,相对于AES加密的远程证明方案,一方面提高了证据的可信性与传输的安全性,另一方面能够反映出用户特征。

In order to overcome the poor safety incapability in reflecting user characteristic in remote attestation,as existed in current remote affestation,a scheme of remote attestation based on user attributes was proposed. In the process of generating trusted evidence and credible verification,the scheme uses password for encryption and decryption. TPM Emulator and Java TCG Software Stack were used to build experimental platform. The experimental results show that the scheme is feasible. Compared with the remote attestation based on AES,it can not only strengthen the security of the transmission, but also reflect user characteristic.