CAJ | 학술논문

针对TPM只作为对密钥的访问控制设备,而不能销毁被攻破密钥的问题,提出了两种利用密钥列表实施撤销的机制.通过对TPM命令集的少量修改,利用密钥列表对加载的密钥进行有效性检查,从而保证被TPM使用的密钥都是未撤销的,并且两种机制都能实现与当前TCG规范的向后兼容,也不会增加其他操作的负载.最后,提出将两种机制结合以保证密钥撤销和加载操作的效率,增强撤销机制的可实施性.
침대TPM지작위대밀약적방문공제설비,이불능소훼피공파밀약적문제,제출료량충이용밀약렬표실시철소적궤제.통과대TPM명령집적소량수개,이용밀약렬표대가재적밀약진행유효성검사,종이보증피TPM사용적밀약도시미철소적,병차량충궤제도능실현여당전TCG규범적향후겸용,야불회증가기타조작적부재.최후,제출장량충궤제결합이보증밀약철소화가재조작적효솔,증강철소궤제적가실시성.
TPM is not able to destroy collapsed keys,because keys (except for SRK and EK) are stored outside of it.To solve this problem,this paper proposed two mechanisms of revoking TPM keys.Without major changes to the TPM command set,checked the validities of loaded keys by using key lists.While realizing revocation checking effectively,preserved backwards compatibility with the current TCG specifications,and introducted no overhead for normal operation.At last,to improve the efficiency of revoking and loading operations and enhance the practicability of revocation mechanism,proposed the combination of both mechanisms.