证书体系在可信计算中具有基础支撑作用,它参与完成了信任传递的整个过程。该文研究身份证实证书(AIK)的内容、产生和其他证书的关系,分析其在远端主机证明的作用和过程。用可信计算技术和AIK证书加强安全套接层(SSL)协议的方法和步骤解决SSL协议中无法验证服务器程序真实性的问题。
One of the Trusted Computing Group(TCG) infrastructure is credential system, which participates in trusted chain of transmission process. Attestation identity credential's type, the full definition and the relationship to other credential are discussed. Its application on remote attestation is studied. Based on the study, the way to improve the security of Secure Socket Layer(SSL) protocol using trusted computing and AIK credential is put forward for solving the application's attestation on SSL server.