关键词: 可信计算, 分布式网络, 跨域认证, 通用可组合安全, 匿名认证

Abstract: The restriction of computing and storage of Trusted Platform Module （TPM） and authentication complexity of Direct Anonymous Attestation （DAA） results in that DAA mechanism is for single-domain. In order to overcome this limitation, a DAA for cross-domain was proposed in this paper, considering paralleling, high-performance and co-processing in distributed network. The mechanism introduced a trusted third party-Certificate Arbitration Center(CAC) to verify the reality of requester's platform certificate, which issues the cross-domain certificate to the requester with real TPM. The certificate is issued once for repeated usage, which prevents CAC becoming system bottleneck. The mechanism reaches the controllable anonymity, and the analysis with universally composable security shows that the mechanism realizes the cross-domain anonymous attestation securely.

Key words: trusted computing, distributed network, cross-domain mechanism, universally composable security, anonymous attestation