检索结果-内蒙古大学图书馆

A Unified Trust Model for Pervasive Environments - Simulation and Analysis

KSII TRANSACTIONS ON INTERNET AND INFORMATION SYSTEMS 2013年第7期7卷 1569-1584页

作者： Khiabani, Hamed Idris, Norbik Bashah Ab Manan, Jamalul-lail Univ Technol Malaysia Adv Informat Sch Kuala Lumpur Malaysia MIMOS Berhad Strateg Adv Res Cluster Kuala Lumpur Malaysia

Ubiquitous interaction in a pervasive environment is the main attribute of smart spaces. Pervasive systems are weaving themselves in our daily life, making it possible to collect user information invisibly, in an unobtrusive manner by known and even unknown parties. Huge number of interactions between users and pervasive devices necessitate a comprehensive trust model which unifies different trust factors like context, recommendation, and history to calculate the trust level of each party precisely. trusted computing enables effective solutions to verify the trustworthiness of computing platforms. In this paper, we elaborate Unified Trust Model (UTM) which calculates entity's trustworthiness based on history, recommendation, context and platform integrity measurement, and formally use these factors in trustworthiness calculation. We evaluate UTM behaviour by simulating in different scenario experiments using a Trust and Reputation Models Simulator for Wireless Sensor Networks. We show that UTM offers responsive behaviour and can be used effectively in the low interaction environments.

关键词： Unified Trust Model Smart Spaces Remote Attestation Pervasive Computing Wireless Sensor Network trusted platform module

来源：评论

学校读者我要写书评

暂无评论

Efficient ID-based TPM key loading scheme for trusted platform

引用

The Journal of China Universities of Posts and Telecommunications 2010年第4期17卷 74-79页

作者： SONG Cheng LIU Bing HU Zheng-ming XIN Yang YANG Yi-xian YIN Han Information Security Center State Key Laboratory of Networking and Switching Technology Beijing University of Posts and Telecommunications Beijing 100876 China Key Laboratory of Network and Information Attack and Defense Technology of Ministry of Education Beijing University of Posts and Telecommunications Beijing 100876 China National Engineering Laboratory for Disaster Backup and Recovery Beijing University of Posts and Telecommunications Beijing 100876 China Beijing Safe-Code Technology Co. Ltd Beijing 100876 China Huawei Technology Ltd Beijing 100093 China

One important function in trusted computing is protected storage, which can protect unlimited amount of data and keys. In the existing trusted platform module （TPM） key loading scheme for trusted platform, a computing platform with TPM as its trusted anchor, the total times of loading operation is the same as the number of the loaded target object＇s ancestors, resulting in low efficiency of loading a TPM key which has many ancestors. To improve efficiency, an identity-based TPM key loading scheme is proposed. In this scheme, the times of loading operation is only two when any TPM key is loaded into TPM. Therefore, the required time cost for loading a TPM key can be reduced, especially for complex TPM key storage hierarchy. By analyzing the correctness, security, efficiency and feasibility, the proposed scheme has the better theoretical and application value.

关键词： trusted computing trusted platform module protected storage ID-based

来源：评论

学校读者我要写书评

暂无评论

Trust Ensuring Crisis Management Hardware module

引用

INFORMATION SECURITY JOURNAL 2010年第2期19卷 74-83页

作者： Fournaris, Apostolos P. Hitachi Europe SAS Informat & Commun Technol Lab European RD Ctr Sofia Antipolis France

Mobile agent systems (MAS) suffer from security holes that in a crisisdisaster management system can be fatal. trusted computing group's TPM chip can be used to solve the problem but only partially. The extreme physical conditions and particularities of the crisis management agent platform do not permit the full exploitation of the TPM's features. To solve this problem the use of a special purpose hardware module, physically connected to a host crisis management device as a local trusted third party, has been proposed. In this paper, we analyze the functionality and structure of such a hardware module, called Autonomous Attestation Token (AAT) and show how a successful attack can be launched on it. To counter this attack, we propose a more sophisticated key release protocol for the communication between the AAT and the host device. This is achieved by securing the communication channel between the two devices. Also, a detailed hardware structure of the AAT is proposed. This hardware structure support the proposed key release protocol. To further analyze this, we identify the basic operations needed by the AAT hardware components and propose a sequence of actions and associated signals that those components need to follow to support those operation.

关键词： Crisis management systems mobile agent security trusting computing trusted platform module

来源：评论

学校读者我要写书评

暂无评论

Implementing trusted Terminals with a TPM and SITDRM

引用

ELECTRONIC NOTES IN THEORETICAL COMPUTER SCIENCE 2008年第1期197卷 73-85页

作者： Stamm, Sid Sheppard, Nicholas Paul Safavi-Naini, Reihaneh Indiana Univ Dept Comp Sci Lindley Hall150 S Woodlawn Ave Bloomington IN 47405 USA Univ Wollongong Sch Comp Sci & Software Engn Wollongong NSW 2522 Australia Univ Calgary Dept Comp Sci Calgary AB T2N 1N4 Canada

The SITDRM Enterprise system [1] protects private customer data by allowing customers to provide policies in the form of a machine-readable license. When employees of an organization want to use customers' data, they must be forced to abide by the licences provided. Some sort of hardened terminal must be used to ensure that not only the hardware and software will cooperate, but that the user of the terminal will too. We use the trusted Computing Group's specifications for a trusted platform upon which to build a data user terminal that can be proved to implement correct license-enforcing behavior. A trusted platform module (TPM) and a TPM-using operating system are all that may be required to construct a verifiably secure terminal.

关键词： trusted platform module Digital rights management

来源：评论

学校读者我要写书评

暂无评论

High Time for trusted Computing

引用

IEEE SECURITY & PRIVACY 2009年第6期7卷 54-56页

作者： Potter, Bruce The Shmoo Group Abstract Authors References Cited By Keywords Metrics Similar Download Citation Email Print Request Permissions

trusted computing is an idea worth dusting off. Although it has been a bit of a flop for the better part of a half century, we might be experiencing a perfect storm regarding the motivations and capabilities needed to realize trusted computing. You might not be able to buy complete trusted systems today. However, in the coming years, the development of trusted computing hopefully will give us more assurance in the systems we use and ultimately more trust in the transactions we make on the Internet every day.

关键词： TPM trusted platform module high-assurance computing it all depends malware protection security & privacy trust trusted computing

来源：评论

学校读者我要写书评

暂无评论

Security and privacy landscape in emerging technologies

引用

IEEE SECURITY & PRIVACY 2008年第4期6卷 74-77页

作者： Landau, Susan Sun Microsyst. Santa Clara CA Abstract Authors References Cited By Keywords Metrics Similar Download Citation Email Print Request Permissions

Recent events spawned a need for better communications of security systems, including industrial control systems and emergency management systems. This work is in initial phases and the author reports it here. In this final column for emerging standards and technologies, she also discusses the privacy and security challenges of Web 2.0 and globalization.

关键词： TCM TPM trusted platform module Web 2.0 emergency management systems emerging standards industrial control systems privacy Security Privacy trusted platform module Inventions third-party maintenance trellis coded modulation Accidents,emergencies and safety Industrial control systems EMERGENCY MANAGEMENT SYSTEMS

来源：评论

学校读者我要写书评

暂无评论

Formal analysis of HMAC authorisation in the TPM2.0 specification

引用

IET INFORMATION SECURITY 2018年第2期12卷 133-140页

作者： Shao, Jianxiong Qin, Yu Feng, Dengguo Chinese Acad Sci Inst Software Trusted Comp & Informat Assurance Lab Beijing Peoples R China

The trusted platform module (TPM) is a system component that provides a hardware-based approach to establish trust in a platform. The latest TPM2.0 specification was accepted as the ISO standard in 2015. It offers functionality for key management by storing keys into the TPM's protected storage. The access to the TPM-resident key object is protected by the session-based authorisation mechanism. This mechanism is keyed to the object's authorisation value known as authValue and the session-bound secret value known as sessionKey. The new authValue introduced into the TPM is protected by the session-based encryption mechanism, which is also keyed on the sessionKey. In the authors' study, they conduct a formal analysis of the TPM2.0 HMAC (hash message authentication code) authorisation mechanism used in the key management. They first use the stateful applied pi calculus to formalise the session-based HMAC authorisation and encryption mechanisms in a model of TPM2.0 API commands. They propose a threat model to formalise the secrecy and authentication properties. Then they discuss several attacking scenarios in practice where the sessionKey could be disclosed. They also instantiate their threat model according to specific attacking scenarios. By using the SAPIC tool and the tamarin prover, they automatically give out the analysis results of their models.

关键词： trusted computing message authentication authorisation formal specification formal analysis HMAC authorisation TPM2 0 specification trusted platform module ISO standard TPM protected storage TPM-resident key object session-based authorisation mechanism object authorisation value authValue session-bound secret value sessionKey hash message authentication code authorisation mechanism encryption mechanisms SAPIC tool tamarin prover

来源：评论

学校读者我要写书评

暂无评论

trusted computing in context

引用

IEEE SECURITY & PRIVACY 2007年第2期5卷 4-5页

作者： Schneider, Fred B. Associate Editor in Chief

The trusted computing technology embodied in the trusted platform module secure-coprocessor from the trusted Computing Group is a hardware-based root of trust that makes it possible for the system designer--not the computer owner--to regulate which programs can run on a given computer. If system designers are evil, then they can use trusted computing to prevent a competitors' programs from being installed, thus creating or preserving a monopoly. When computer owners are incompetent, though, benevolent system designers can use trusted computing to prevent malware from being installed and run.

关键词： trusted Computing trusted platform module trusted Computing Group

来源：评论

学校读者我要写书评

暂无评论

Guest editorial - Special issue on hardware assisted techniques for IoT and bigdata applications

引用

INTEGRATION-THE VLSI JOURNAL 2017年 58卷 263-266页

作者： Mohanty, Saraju P. Srivastava, Ashok Hu, Shiyan Ghosal, Prasun Univ North Texas Dept Comp Sci & Engn CSE Denton TX 76203 USA Louisiana State Univ Dept Elect & Comp Engn Baton Rouge LA 70803 USA Michigan Technol Univ Houghton MI 49931 USA IIEST Sibpur India

来源：评论

学校读者我要写书评

暂无评论

Anonymous authentication scheme of trusted mobile terminal under mobile Internet

引用

The Journal of China Universities of Posts and Telecommunications 2013年第1期20卷 58-65页

作者： ZHANG De-dong MA Zhao-feng NIU Xin-xin Peng Yong Information Security Center Beijing University of Posts and Telecommunications National Engineering Laboratory for Disaster Backup and Recovery Beijing University of Posts and Telecommunications China Information Technology Security Evaluation Center

In order to solve the contradictions between user privacy protection and identity authentication, an anonymous authentication scheme under mobile Internet is proposed, which is based on the direct anonymous attestation of trusted computing and uses the encrypting transfer and signature validation for its implementation. Aiming at two access mode of trusted mobile terminal under mobile Internet, self access and cross-domain access, the authentication process of each mode is described in details. The analysis shows that the scheme implements anonymous authentication on mobile Internet and is correct, controllable and unforgeable.

关键词： trusted platform module anonymous authentication strong RSA assumption remote attestation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：