Abstract: An important component of trusted computation is attestation. This paper analyzes two authentication protocols——the trusted third party modle and the direct anonymous attestation, which are adopted by the trusted computation group on the trusted computing platform and whose advantage and disadvantage are pointed out. It gives the key point when implementing the direct anonymous attestation. Its application on secure log-on to intranet and an extend to DAA are designed for better privacy.

Key words: TTP, DAA, Privacy, Anonymous

摘要： 证明是可信计算的一个重要功能。该文介绍了可信计算组织在可信计算平台上采用的2种认证协议——可信第3方模型和直接匿名证明，分析了其优缺点。对于直接匿名证明，给出了实现应注意的问题和在企业内部网安全登录的应用实例，提出了为了获得更好的隐私性，可以对其进行扩展的方法。

关键词: TTP, DAA, 隐私, 匿名