基于组件属性的远程证明_秦宇.pdf

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software , Vol.20, No.6, June 2009, pp.1625− 1641 doi: 10.3724/SP.J.1001.2009.03343 Tel/Fax: +86-10 © by Institute of Software , the Chinese Academy of Sciences. All rights reserved. ∗ 基于组件属性的远程证明 1,2+ 1 秦 宇 , 冯登国 1( 中国科学院 软件研究所 信息安全国家重点实验室,北京 100190) 2 中国科学院 研究生院北京 ( , 100049) Component Property Based Remote Attestation QIN Yu1,2+, FENG Deng-Guo1 1(State Key Laboratory of Information Security, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China) 2(Graduate University, The Chinese Academy of Sciences, Beijing 100049, China) + Corresponding author: E-mail: qin_yu@, Qin Y, Feng DG. Component property based remote attestation. Journal of Software, 2009,20(6):1625−1641. /1000-9825/3343.htm Abstract : A fine-grained property attestation based on the components is proposed to prove that the user platform satisfies the security property predefined by remote relying party. Compared with other remote attestation schemes, CPBA (component property based attestation) has the advantage of semantic and property expression to some extent. It is not only more fine-grained and extensive, but also easier to implement issuing, verifying and revoking the property certificate. CPBA guarantees the authenticity of attestation by component commitment, and protects the privacy of platform components by zero-knowledge proof. It is proved secure in Random Oracle Model under strong RSA Assumption. The experimental result of its prototype system indicates that CPBA is a flexible, usable, highly