关键词: 远程证明, 可信计算, PCA, 假名, 匿名证明

Abstract:

Remote attestation is one of the key technologies of trusted computing，which is used for attesting the identity and configuration of remote platforms, but there are some shortcomings in existing remote attestation schemes. On the basis of analyzing the existing remote anonymous schemes based on Anonymous Attribute Credential(AAC)，an improved scheme is proposed. Aiming at the problem that the PCA which delivers the certification(AAC) is not verified in the process of applying, the improved scheme uses the session key to sign PCA to guarantee the authenticity of PCA. Meanwhile, aiming at the problem of the malicious user’s access to the network, a pseudonym mechanism is introduced in the improved scheme. It can ensure the anonymity of the user and can prevent the illegal access of the users with malicious historical marks.

Key words: remote attestation；trusted computing；PCA；pseudonym；anonymous attestation