Remote attestation mechanism of platform configuration based on dynamic Huffman tree

doi:10.3724/SP.J.1087.2012.02275

Journal of Computer Applications ›› 2012, Vol. 32 ›› Issue (08): 2275-2282.DOI: 10.3724/SP.J.1087.2012.02275

• Information security • Previous Articles Next Articles

Remote attestation mechanism of platform configuration based on dynamic Huffman tree

FU Dong-lai¹,²,PENG Xin-guang³,CHEN Gou-xi²,YANG Qiu-xiang²

1. College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan Shanxi 030024, China
2. School of Electronics and Computer Science and Technology, North University of China, Taiyuan Shanxi 030051, China
3. College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan Shanxi 030024, China;

Received:2012-02-21 Revised:2012-04-17 Online:2012-08-28 Published:2012-08-01
Contact: FU Dong-lai

动态Huffman树平台配置远程证明方案

付东来¹,²,彭新光¹,陈够喜²,杨秋翔²

1. 太原理工大学计算机科学与技术学院，太原 030024
2. 中北大学电子与计算机科学技术学院，太原 030051

通讯作者: 付东来
作者简介:付东来(1979-)，男，河南林州人，讲师，博士研究生，主要研究方向：可信计算、云计算、信息隐藏、程序理解;
彭新光(1955-)，男，山西太原人，教授，博士生导师，博士，主要研究方向：计算机网络与安全;
陈够喜(1966-)，男，山西太谷人，副教授，博士，主要研究方向：信息隐藏、图像处理;
杨秋翔(1969-)，男，山西临汾人，教授，主要研究方向：信息安全、网络拓扑。
基金资助:
山西省留学基金资助项目(2009-28);山西省自然科学基金资助项目(2009011022-2);中北大学自然科学基金资助项目

Abstract

Abstract: In order to improve the efficiency of remote attestation for platform configuration, a method based on RAMT (Remote Attestation based on Merkle Hash Tree) was proposed which improved the approach to storing the Hash value of trusted entities by using a dynamic Huffman tree. And the relevant proof of verification efficiency was also given. From the point of view of data structures used for storing the integrity Hash value of the application software, the problems of the existing methods were analyzed. And detailed description about architecture, measurement and verification of RADHT (Remote Attestation based on a Dynamic Huffman Tree) was given. An example about integrity measurement algorithm was presented for the proposed mechanism. The ability in privacy protection and the efficiency of RADHT were discussed. Compared with RAMT, the probability of the integrity Hash value inquired and its update were considered. Results show the efficiency of the remote attestation is improved.

Key words: trusted computing, remote attestation, platform configuration, dynamic Huffman tree, verification efficiency

摘要： 为了进一步提高平台配置远程证明方案的效率，在基于Merkle哈希树的远程验证机制RAMT的基础上，改进了可信实体散列值的存储方案，提出了基于动态Huffman树的平台配置远程证明方案RADHT，给出了算法效率的理论证明过程。认真讨论了可信实体的散列值存储方案，详细描述了动态Huffman树平台配置远程证明方案的体系结构、度量及验证过程，给出了一个完整性度量算法示例，并讨论了新机制的隐私保护能力和验证效率。与RAMT方案相比，新机制考虑了可信实体的散列值被查询的概率及其概率的动态更新问题。结果表明，新机制改进了平台配置远程证明方案的效率。

关键词: 可信计算, 远程证明, 平台配置, 动态哈夫曼树, 验证效率

CLC Number:

TP309

FU Dong-lai PENG Xin-guang CHEN Gou-xi YANG Qiu-xiang. Remote attestation mechanism of platform configuration based on dynamic Huffman tree[J]. Journal of Computer Applications, 2012, 32(08): 2275-2282.

付东来彭新光陈够喜杨秋翔. 动态Huffman树平台配置远程证明方案[J]. 计算机应用, 2012, 32(08): 2275-2282.

References

[1]Trusted Computing Group.TPM Specification Version 1.2 Revision 103:Part 1-Design Principles[EB/OL].［2012-01-16］. http://www.trustedcomputinggroup.org/files/resource_files/646BE624-1D09-3519-ADDA61BE37A21A74/mainP1DPrev103.pdf. [2]Trusted Computing Group. TPM SpecificationVersion 1.2 Revision 103:Part 2-Structures.[EB/OL].［2012-01-16］. http:// www.trustedcomputinggroup.org/files/resource_files/8D3D6571-1D09-3519-AD22EA2911D4E9D0/mainP2Structrev103.pdf. [3]Trusted Computing Group. TPM SpecificationVersion 1.2 Revision 103: Part 3-Commands[EB/OL].［2012-01-16］. http:// www.trustedcomputinggroup.org/files/resource_files/E14A09AD-1A4B-B294-D049ACC1A1A138ED/mainP3Commandsrev103.pdf. [4]SAILER R, ZHANG X L, JAEGER T, et al. Design and implementation of a TCG-based integrity measurement architecture[C]// SSYM'04: Proceedings of the 13th Conference on USENIX Security Symposium. Berkley: USENIX Association, 2004, 13: 223-238. [5]徐梓耀,贺也平,邓灵莉.一种保护隐私的高效远程验证机制[J].软件学报,2011,22(2):339-352. [6]ALSOURI S, DAGDELEN , KATZENBEISSER S. Group-based attestation: Enhancing privacy and management in remote attestation[C]// Trust 2010: Proceedings of the 3rd International Conference on Trust and Trustworthy Computing, LNCS 6101. Berlin: Springer-Verlag, 2010:63-67. [7]ALAM M, ZHANG XINWEN, NAUMAN M, et al. Model-based behavioral attestation[C]// Proceedings of the 13th ACM Symposium on Access Control Models and Technologies. New York: ACM,2008:175-184. [8]GU LIANG, DING XUHUA, DENG R H, et al. Remote attestation on program execution[C]// STC '08: Proceedings of the 3rd ACM Workshop on Scalable Trusted Computing. New York:ACM, 2008:11-20. [9]PENG GUOJUN, PAN XUANCHEN, ZHANG HUANGUO,et al. Dynamic trustiness authentication framework based on software's behavior integrity[C]// ICYCS 2008: The 9th International Conference for Young Computer Scientists. Washington, DC: IEEE Computer Society, 2008:2283-2288. [10]LOSCOCCO P A, WILSON P W, PENDERGRASS J A,et al. Linux kernel integrity measurement using contextual inspection[C]// STC '07: Proceedings of the 2007 ACM Workshop on Scalable Trusted Computing. New York: ACM, 2007: 21-29. [11]NAUMAN M, ALAM M, ZHANG X, et al. Remote attestation of attribute updates and information flows in a UCON system[C]//Trust '09: Proceedings of the 2nd International Conference on Trusted Computing. Berlin: Springer-Verlag, 2009:63-80. [12]BAIARDI F, CILEA D, SGANDURRA D, et al. Measuring semantic integrity for remote attestation[C]// Trust'09: Proceedings of the 2nd International Conference on Trusted Computing. Berlin: Springer-Verlag, 2009:81-100. [13]李尚杰,贺也平,刘冬梅,等.基于属性的远程证明的隐私性分析[J].通信学报,2009,30(S2):146-152. [14]谢海涛,王玉明,杨宗凯,等.自适应Huffman树组密钥更新方案[J].华中科技大学学报:自然科学版,2009,37(9):33-36. [15]付东来，彭新光，陈够喜，等.一种高效的平台配置远程验证机制[J].计算机工程,2012,38(7):25-27. [16]薛源,周永彬,郭建锋,等.基于Huffman算法的证书撤销树[J].通信学报, 2005,26(2):45-50.

Remote attestation mechanism of platform configuration based on dynamic Huffman tree

动态Huffman树平台配置远程证明方案

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	XIAO Yuelei, DENG Xiaofan. Improvement and analysis of certificate-based wired local area network security association scheme [J]. Journal of Computer Applications, 2021, 41(7): 1970-1976.
[2]	ZHANG Xuewang, YIN Zijie, FENG Jiaqi, YE Caijin, FU Kang. Data trading scheme based on blockchain and trusted computing [J]. Journal of Computer Applications, 2021, 41(4): 939-944.
[3]	QI Neng, TAN Liang. Trust chain model with waterfall characteristic based on trusted virtualization platform [J]. Journal of Computer Applications, 2018, 38(2): 327-336.
[4]	XU Mingdi, GAO Yang, GAO Xueyuan, ZHANG Fan. Correspondence property-based platform configuration attestation [J]. Journal of Computer Applications, 2018, 38(2): 337-342.
[5]	XIAO Yuelei, WU Junsheng, ZHU Zhixiang. Improvement and analysis of LAN security association scheme based on pre-shared key [J]. Journal of Computer Applications, 2018, 38(11): 3246-3251.
[6]	SUN Liang, CHEN Xiaochun, ZHENG Shujian, LIU Ying. Research and application for terminal location management system based on firmware [J]. Journal of Computer Applications, 2017, 37(2): 417-421.
[7]	ZHANG Xin, YANG Xiaoyuan, ZHU Shuaishuai. Trusted and anonymous authentication protocol for mobile networks [J]. Journal of Computer Applications, 2016, 36(8): 2231-2235.
[8]	WENG Xiaokang ZHANG Ping WANG Wei ZHU Yi. Remote attestation mechanism for platform integrity based on unbalanced-Hash tree [J]. Journal of Computer Applications, 2014, 34(2): 433-437.
[9]	HE Long PENG Xinguang. Safe and efficient remote attestation protocol based on bilinear pairings signcryption [J]. Journal of Computer Applications, 2013, 33(10): 2854-2857.
[10]	SHAO Jing CHEN Xingyuan DU Xuehui CAO Lifeng. Distributed multilevel security core architecture based on noninterference theory [J]. Journal of Computer Applications, 2013, 33(03): 712-716.
[11]	YAO Jianhua WU Jiamin NIU Wenjia TONG Endong. Remote sensing service discovery mechanism based on trusted QoS clustering [J]. Journal of Computer Applications, 2013, 33(02): 587-591.
[12]	MO Jiaqing HU Zhongwang YE Xuelin. Research of trust assessment method in trust computing based on fuzzy theory [J]. Journal of Computer Applications, 2013, 33(01): 142-145.
[13]	XIN Si-yuan ZHAO Yong LIAO Jian-hua WANG Ting. Dynamic trusted measurement model of operating system kernel [J]. Journal of Computer Applications, 2012, 32(04): 953-956.
[14]	QIN Xi GAO Li CHANG Chao-wen HAN Pei-sheng. Lightweight authentication and evaluation protocol for mobile trusted access [J]. Journal of Computer Applications, 2012, 32(01): 30-34.
[15]	YAN Jian-hong PENG Xin-guang. Trusted attestation of measurement action information base [J]. Journal of Computer Applications, 2012, 32(01): 56-59.