Multi-domain Direct Anonymous Attestation Scheme from Pairings

Abstract

In trusted computing, a Trusted Platform Module(TPM) is used to enhance the security of the platform. When the TPM proofs his identity to a remote verifier, the Direct Anonymous Attestation (DAA) method is adopted by the Trusted Computing Group(TCG) to provide anonymous authentication. But the original DAA scheme in TCG specifications can only work well in a single domain, which can not be used in multi domains directly. It is necessary to improve the single domain DAA to be available in multi domains. In this paper, we proposed a multi-domain DAA scheme, which is based on proxy signature and a pairings based DAA method. The proxy signature is used to delegate the trusted relationship and domain authentication, while the pairings based DAA method is used for the computation platform authentication when a trusted platform accessing another domain. Then the DAA authentication protocol is also designed. Finally, the analysis on the protocol are given, the results show that the proposed scheme is secure and effective.