Cross-domain mechanism of anonymous attestation for distributed network

Abstract

The restriction of computing and storage of Trusted Platform Module TPM and authentication complexity of Direct Anonymous Attestation DAA results in that DAA mechanism is for single-domain.In order to overcome this limitation a DAA for cross-domain was proposed in this paper considering paralleling high-performance and co-processing in distributed network.The mechanism introduced a trusted third party-Certificate Arbitration Center CAC to verify the reality of requester's platform certificate which issues the cross-domain certificate to the requester with real TPM.The certificate is issued once for repeated usage which prevents CAC becoming system bottleneck.The mechanism reaches the controllable anonymity and the analysis with universally composable security shows that the mechanism realizes the cross-domain anonymous attestation securely.