TPM 2.0密钥复制安全性增强方案

TPM 2.0密钥复制安全性增强方案 Security Enhancement of Key Duplication in TPM 2.0 徐扬 XU Yang 1 2 first-author 赵波 ZHAO Bo 1 2 米兰·黑娜亚提 Milan·Heinayati 3 余发江 YU Fajiang 1 2 武汉大学计算机学院 武汉大学计算机学院 School of Computer,Wuhan University School of Computer,Wuhan University 空天信息安全与可信计算教育部重点实验室 空天信息安全与可信计算教育部重点实验室 Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education,Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education,Wuhan University 新疆广播电视大学远程教育学院 新疆广播电视大学远程教育学院 Distance Learning College,Xinjiang Radio and TV University Distance Learning College,Xinjiang Radio and TV University 分析了可信平台模块（TPM）2.0密钥复制相关流程,对于其中存在的密钥隐私泄露的安全问题进行了改进.在用户不安全复制传输情形下,从TPM管理者的角度出发提出了一套基于TPM自身的加密传输协议.通过利用TPM自身产生安全密钥,对未受保护的用户敏感数据进行加密,并通过签名的方式保障传输的可靠性.本文描述出了安全增强方案的实现方式,证明了其安全性和有效性,同时对性能进行测试,结果表明本方案开销与原始方案保持在100ms以内,不会对实际性能造成影响. This paper analyzed the key duplication process of the trusted platform module（TPM）2.0and solved the existing security problem of key privacy disclosure.Considering the insecurity of key duplication and transmission,we proposed an encryption transmission protocol based on TPM itself from the perspective of the administrator.Based on the security key generated from TPM,the protocol encrypted the unprotected sensitive data of users and guaranteed the credibility of transmission by signature.This paper described how to implement security enforcement and proved the effectiveness and performance.The result shows that the time overhead of our mechanism to the original is below 100 ms and will not affect the actual performance. TPM 2.0 密钥复制 隐私保护 TPM 2.0 key duplication privacy protection 10.14188/j.1671-8836.2014.06.004 TN918.4 国家重点基础研究发展计划（973）项目（2014CB340600）;国家自然科学基金重点项目（61332019）;国家自然科学基金（61173138,61272452,61103220）;湖北省重点新产品新工艺研究开发项目（2012BAA03004）;湖北省企业合作项目（YB2012120174,YB2013110084）资助 2014-06-01 2021-04-01 6 60