Abstract: The conventional protocol of platform attestation has passivity and cheat problem in practice because of using nonce. This paper proposes platform attestation based on time, which uses transport session associating attestation with time in application layer. Equipment can upload attestation report actively on time and record log in the situation of network disconnection.

Key words: trusted computing, network management, platform Integrity attestation, transport session

摘要： 现有的平台完整性证明协议由于使用了随机数，在实际应用中存在被动响应和欺骗问题。该文针对以上不足提出时间方案，利用TPM的传输会话功能，通过时间戳将完整性报告与时间绑定，实现基于时间的平台完整性证明。设备可在固定时间主动上传完整性报告，在连接中断时定时进行完整性报告，实现日志功能，杜绝欺骗问题。

关键词: 可信计算, 网络管理, 平台完整性证明, 传输会话

CLC Number: 

• TP309.2