基于属性签名的属性远程证明方案

发布时间：2018-06-20 11:52

本文选题：可信计算 + 远程证明　；参考：《工程科学与技术》2017年S2期

【摘要】：可信计算中的远程二进制平台完整性证明方式存在平台(软、硬件)配置泄露问题,可能会导致针对性攻击、差别化服务和匿名性破坏。提出利用属性基签名(attribute based signature,ABS)构造可信计算中远程证明的属性证明方案(property based attestation,PBA)。在属性基签名中,签名者确保产生的签名满足某组属性或者特定的访问控制结构,验证者仅能够验证签名是否满足相应的属性或者访问结构。将属性签名中的签名策略(属性树)与远程属性证明中的安全属性进行映射。由于属性签名的匿名性及不可否认性,本方案仅能得知证明者是否满足规定的签名策略,无法得知证明方的具体配置,达到验证属性证明目的。本方案无需使用属性证书,平台配置由不同授权机构管理,共同生成属性签名。在标准模型下对本方案进行安全性证明,结果表明其满足正确性、不可伪造性和隐私性。
[Abstract]:The remote binary platform integrity certification in trusted computing has the problem of platform (software and hardware) configuration disclosure, which may lead to targeted attacks, differential services and anonymity damage. This paper presents an attribute proof scheme for remote proof in trusted computing based on attribute based signature / ABS (attribute based signature / ABS). The property based attestation is used to construct the attribute proof scheme for trusted computing. In attribute base signature, the signer ensures that the generated signature satisfies a set of attributes or a specific access control structure, and verifier can only verify whether the signature satisfies the corresponding attribute or access structure. The signature policy (attribute tree) in attribute signature is mapped to the security attribute in remote attribute proof. Because of the anonymity and non-repudiation of attribute signature, this scheme can only find out whether the prover satisfies the prescribed signature strategy, and can not know the concrete configuration of the prover, so that the purpose of verifying the attribute proof can be achieved. This scheme does not need to use the attribute certificate, the platform configuration is managed by different authorization agencies, and the attribute signature is generated together. The results show that the scheme is correct, unforgeable and privacy.
【作者单位】：武警工程大学电子技术系网络与信息安全武警部队重点实验室;武警工程大学信息安全研究所;
【基金】：国家自然科学基金资助项目(61402530;61272492)
【分类号】：TP309

【相似文献】