针对可信计算平台的原始直接匿名证明方案在多信任域的环境下存在的不足,提出了一种多信任域内的直接匿名证明方案.该方案扩展了原始的直接匿名证明方案,解决了可信计算平台在多信任域内的隐私性保护问题.利用理想系统/现实系统模型对该方案进行了安全性的分析和证明.分析表明,该方案满足匿名性和不可伪造性.最后分析方案的计算性能,实验验证了方案的有效性和可行性.
In this paper, the authors analyze the direct anonymous scheme for trusted computing platform and find the deficiency of direct anonymous scheme in multi-domain environments. Then, the authors extend the direct anonymous scheme so that the new scheme can be suitable for multi-domain environment. The new scheme can protect the privacy of trusted computing platform in multi-domain environment, meanwhile the authors analyze the security aspects of the proposed scheme, it is showed that the scheme meet the security requirements of unforgeability and anonymity, finally the authors analyze the efficiency of the proposed scheme and validate the proposed scheme through the experiments.