Trusted Computing

Attest. 𝒱 challenges 𝒫 with a random number $N_v{\in }_R{\left\{0,1\right\}}^{l_H}$for the property attestation. The host ℋ invokes TCM chip (ℳ) to attest the platform configuration after 𝒫 receives the request. ℳ generates random number $r_n,r_0{\in }_R{Z}_q^{*},,N_t{\in }_R{\left\{0,1\right\}}^{l_{\phi }}$with random number generator inside the security chip, computes $h_T=g_T^{r_h}\in G_T,$generates commitment $C=g_T^{cs}{h}_T^{r_0}$on c s following Pederson commitment scheme and signs the commitment with PIK in TCM chip. The final signature is defined as δ = Sigℳ(C,Nv||Nt).

ℳ sends gT, hT, C, r0, δ,Nt to host ℋ for the property attestation signature.

ℋ randomizes the signature σ on the property certificate and gets $a\prime =a^r$