基于代理多签名的模块属性远程证明协议

摘要

为了解决当前远程证明方案中安全性差、效率低的问题，提出一种基于椭圆曲线离散对数难题的代理多签名的模块属性远程证明协议。该协议在构建模块签名时采用代理多签名方式，简化了签名验证的过程，提高了远程证明的效率；而且采用基于椭圆曲线数字签名算法，大大提高了模块的安全性。通过实验验证了协议的可行性。实验结果表明，该方案可以快速生成可信平台中各模块的签名，提高了远程证明的效率。同时该方案具有安全性、隐私性和不可伪造性。%In order to solve the problem of poor security and low efficiency in current remote attestation schemes, we propose a module attribute remote attestation protocol with proxy multi-signature, which is based on elliptic curve discrete logarithm problem.In the protocol, the proxy multi-signature is used to build the modules signature, which simplifies the process of signature verification and enhances the efficiency of remote attestation.And to use elliptic curve digital signature-based algorithm greatly improves the safety of the module.The feasibility of the protocol is verified through experiment.Experimental results show that the scheme can quickly generate the signatures of each module in trusted platform, improves the efficiency of remote attestation.Meanwhile, the security, privacy and unforgeability of the scheme are satisfied.