基于DDH(decision Diffie-Hellman)假设和q-SDH假设,给出了一种基于双线性映射的直接匿名证明(direct anonymous attestation,简称DAA)方案.与其他方案相比,该方案极大地缩短了签名长度,降低了签名过程中可信平台模块(nusted platform module,简称TPM)的计算量同时,为基于椭圆曲线的TPM提供了可行的隐私性保护解决方案,利用理想系统/现实系统模型对该方案的安全性进行分析和证明,分析表明,该方案满足不可伪造性、可变匿名性和不可关联性.
This paper proposes a Direct Anonymous Attestation (DAA) scheme from the bilinear maps based on the decisional Diffie-Hellman (DDH) assumption and q-SDH assumption. Compared to other schemes, the scheme's signature length is much shorter. Meanwhile, the scheme reduces the computational cost of the Trusted Platform Module (TPM) in the signing process. It gives a practical solution to ECC-based TPM in protecting the privacy of the TPM. This paper gives a detailed security proof of the proposed scheme in ideal-system/real-system security model which shows that the scheme meets the security requirements of unforgeability, variable anonymity and unlinkability.