Abstract:In today’s globalized digital world, network-based, mobile, and interactive collaborations have enabled work platforms of personal computers to cross multiple geographical boundaries. The new requirements of privacy-preservation, sensitive information sharing, portability, remote attestation, and robust security create new problems in system design and implementation. There are critical demands for highly secure work platforms and security enhancing mechanisms for ensuring privacy protection, component integrity, sealed storage, and remote attestation of platforms. Trusted computing is a promising technology for enhancing the security of a platform using a trusted platform module (TPM). TPM is a tamper-resistant microcontroller designed to provide robust security capabilities for computing platforms. It typically is affixed to the motherboard with a low pin count (LPC) bus. However, it limited in that TPM cannot be used directly in current common personal computers (PCs), and TPM is not flexible and portable enough to be used in different platforms because of its interface with the PC and its certificate and key structure. For these reasons, we propose a portable trusted platform module (PTPM) scheme to build a trusted platform for the common PC based on a single cryptographic chip with a universal serial bus (USB) interface and extensible firmware interface (EFI), by which platforms can get a similar degree of security protection in general-purpose systems. We show the structure of certificates and keys, which can bind to platforms via a PTPM and provide users with portability and flexibility in different platforms while still allowing the user and platform to be protected and attested. The implementation of prototype system is described in detail and the performance of the PTPM on cryptographic operations and time-costs of the system bootstrap are evaluated and analyzed. The results of experiments show that PTPM has high performances for supporting trusted computing and it can be used flexibly and portably by the user.

Hierarchical-CPK-Based Trusted Computing Cryptography Scheme.

Distributed Certification Application Via a Trusted Dealer

Privacy Protection in Trust Management

��计算中基于可转换代理签密的可证安全的认证协议

Design and implementation of a portable TPM scheme for general-purpose trusted computing based on EFI

Authentication Scheme Based on Trusted Computing of Preventing Phishing Attacks

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

CCxTrust: Confidential Computing Platform Based on TEE and TPM Collaborative Trust

Efficient Identity-Based Key Issue with TPM

Trustchain -- Trustworthy Decentralised Public Key Infrastructure for Digital Credentials

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

A Lightweight Mutual Authentication Scheme for Power Edge Computing System

A novel method for generating public keys involving matrix operations

Securing Key Issuing in Peer-to-peer Networks.

Scalable Byzantine Fault Tolerant Public Key Authentication for Peer-to-Peer Networks

TMPTCP: A Lightweight Trust Extension for Multipath-TCP.

Multi-Party Cryptographic Key Distribution Protocol over a Public Network Based on a Quick-Response Code

A blockchain-based platform for decentralized trusted computing

Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials

An Implementation Suite for a Hybrid Public Key Infrastructure

Clustering Based Physical-Layer Authentication in Edge Computing Systems with Asymmetric Resources.