基于特定区间承诺值证明机制改进的DAA认证方案

摘要

An improved scheme was proposed against the shortage of current mechanism of direct anonymous attesta-tion(DAA) in trusted computing platform. This scheme firstly adopted the CA to verify the EK certificate of prover to help prover and DAA issuer building the session key respectively. The DAA issuer can issue the secret certificate to the prover with the key. Then the prover used a committed number lying in a specific interval to attest the validity to the verifier by integrating the protocol that two committed numbers are equal with the protocol of the CFT proof. The analysis shows that this scheme not only has a higher security, but also is non-fraudulence,anonymity, can be withdrawed and more efficiency.%针对目前可信计算平台直接匿名认证(DAA)机制的不足,提出一种改进的匿名认证方案.该方案先采用CA验证示证者的EK证书,协助示证者和DAA颁布者各自生成会话密钥,使DAA颁布者能够为示证者颁发秘密的DAA证书；然后示证者用两承诺值相等协议及CFT证明协议来证明承诺值位于某个特定区间的方法,向验证者证明其平台的真实合法性.分析表明,该方案具有较高的安全性,还具备不可欺骗性、匿名性、撤消性,效率更高.