CREDENTIAL VALIDATION

摘要

A message to be signed and a base name point derived from a direct anonymous attestation (DAA) credential may be provided to a device. A signed version of the message and a public key value associated with the base name point may be received in response. Thereafter, the DAA credential may be determined to be valid based on the signed version of the message.

主权项

1. A non-transitory computer-readable medium storing instructions that, when executed by a host computing device, cause the host computing device to:
derive, from a direct anonymous attestation (DAA) credential, a base name point; provide, to a trusted platform module embedded on the host computing device, a message and the base name point, the trusted platform module including computer storage for protecting security of a public key value associated with the base name point; receive, from the trusted platform module, a version of the message signed by the trusted platform module using the base name point, wherein the version of the message includes the public key value; and determine, based on the version of the message signed by the trusted platform module and the base name point, whether the DAA credential is valid.