A Forward Secure Direct Anonymous Attestation Scheme

Direct Anonymous Attestation (DAA) is a cryptographic mechanism that enables remote authentication of a Trusted Platform Module (TPM) while preserving its privacy. In this paper, we propose a new DAA scheme based on the strong RSA assumption and the decisional Diffie-Hellman assumption. While satisfying all the security properties proposed in previous DAA schemes, our scheme provides a new desired security property, forward security: compromise of the current private key of TPM does not enable an adversary to forge signatures pertaining to the past. Such forward security is important to mitigate the damage caused by private key exposure. Key–Words: Trusted computing platform, Direct anonymous attestation, Forward security, Privacy, Trusted platform module