Enhanced Architecture of TPM

摘要

An enhanced architecture of TPM (Trusted Platform Module) is presented in this paper. Besides the previous components, a new special information I/O interface is added. By connecting with the various parallel or serial trusted devices outside TPM, the new special information I/O interface replaces the function of physical-presence and implements the preconfiguration, backup and restoration of information within TPM. At the same time, the service methods of new I/O component are proposed. By these methods, we can get the identity of the connecting device outside TPM, check the state of TPM, preconfiguration the initial or migratory information, backup or restore the sensitive information within TPM. Finally, an example shows that the security operations on the sensitive information within TPM can be implemented by the new special information I/O interface