TPM 2.0策略授权机制的安全缺陷及其改进方案

TPM 2.0策略授权机制的安全缺陷及其改进方案 Security Risk and Improved Scheme for TPM 2.0 Policy Authorization 吴凯 Wu Kai 1 2 first-author 赵波 ZHAO Bo 1 2 米兰·黑娜亚提 Milan·Heinayati 3 余发江 YU Fajiang 1 2 武汉大学计算机学院 武汉大学计算机学院 School of Computer,Wuhan University School of Computer,Wuhan University 空天信息安全与可信计算教育部重点实验室 空天信息安全与可信计算教育部重点实验室 Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education,Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education,Wuhan University 新疆广播电视大学远程教育学院 新疆广播电视大学远程教育学院 Distance Learning College,Xinjiang Radio and TV University Distance Learning College,Xinjiang Radio and TV University 分析了可信平台模块TPM 2.0策略授权方式的安全性,开发了专门的灰盒测试系统对TPM 2.0的安全性进行了一系列测试,发现它存在两个潜在的安全隐患:信息泄露安全隐患和授权认证安全隐患.给出了利用该安全隐患暴力破解策略授权的实现方法并提出了一种基于共享密钥的授权会话加解密方案来对整个策略授权过程进行改进.实验结果表明,该改进方案可以很好的保证策略授权过程的安全性. The security of trusted platform module TPM 2.0policy authorization was analyzed.By using a specialized tools we designed,a series of gray-box testing was made,and two security risks information leakage and authentication risk were found.The attack method and an improved scheme based on shared key encryption were given.The experimental results show that the improved scheme can ensure the process of policy authorization security. 可信计算 TPM 2.0 策略授权 安全威胁 trusted computing TPM 2.0 policy authorization security risk 10.14188/j.1671-8836.2014.06.018 TP393.08 国家重点基础研究发展计划（973）项目（2014CB340600）;国家自然科学基金重点项目（61332019）;国家自然科学基金（61173138,61272452,61103220）资助项目;湖北省重点新产品工艺研究开发项目（2012BAA03004）;湖北省企业合作项目（YB2012120174,YB2013110084） 2014-06-01 2021-04-01 6 60