CAJ | 학술논문

　　针对当前可信计算平台身份证明最好的理论解决方案——直接匿名认证（DAA ，Direct Anonymous Attestation）协议中平台隐私数据（,A e ）是以明文方式直接存储在平台上很容易受到攻击的问题，基于 TPM 的安全存储功能，提出了平台隐私数据（,A e ）的保护方案。该方案根据用户的身份生成隐私数据（,A e ）的保护密钥和授权数据，利用 TPM 的安全存储功能对该保护后的隐私数据进行存储，并通过理论分析和实验验证，表明了所提方案在保护隐私数据（,A e ）的同时，对直接匿名认证协议的性能影响也不大，增强了 DAA 协议的身份认证可信。
　　침대당전가신계산평태신빈증명최호적이론해결방안——직접닉명인증（DAA ，Direct Anonymous Attestation）협의중평태은사수거（,A e ）시이명문방식직접존저재평태상흔용역수도공격적문제，기우 TPM 적안전존저공능，제출료평태은사수거（,A e ）적보호방안。해방안근거용호적신빈생성은사수거（,A e ）적보호밀약화수권수거，이용 TPM 적안전존저공능대해보호후적은사수거진행존저，병통과이론분석화실험험증，표명료소제방안재보호은사수거（,A e ）적동시，대직접닉명인증협의적성능영향야불대，증강료 DAA 협의적신빈인증가신。
Aiming at the problem in DAA (Direct Anonymous Attestation), the best theoretical solution for Identity Attestation of TPM (Trusted Platform Module) is suggested. And for the authentication secret— private data ( ,A e )is directly stored in plaintext on the platform, it could be easily attacked or destroyed. Based on the safe storage function of TPM, a protection scheme for platform private data in DAA is proposed. This scheme, in accordance with the protection key and for the user’s identity generation the authority data, could protect the platform private data, and the private data ( ,A e ) is encrypted with the symmetric key of AES, and stored in hard disk. The theoretical analysis and experimental results indicate that the proposed scheme could effectvely protect the private data( ,A e )and enhance the creditability of DAA is identity futhentication.