TPM中身份证明密钥的管理

TPM是可信计算中的一个核心模块,在TPM中管理着很多的密钥,并通过这些密钥来完成安全存储、完整性存储和报告等功能。其中身份证明密钥(AIK)是其中较为重要的一个,文章重点介绍了TPM中对于AIK的管理过程,并简要分析了该过程中的优点,以及可能存在的安全隐患,并提出了解决方案。

AIK Management in TPM

Trusted Platform Module(TPM) is the key part of Trusted computing platform. There are many keys being managed in TPM, and TPM use these keys to achieve it's functions, such as security storage, Integrity Measurement, Storage and Reporting. The attestation identity keys are important ones in these keys. This paper describes how an AIK is managed in TPM, analyzes the advantage and problems of the processing, and gives some suggestions to solve these problems.