Kerberos协议在可信平台下的设计与实现

Kerberos协议在可信平台下的设计与实现

温博为;吴振强;张丽娟

【期刊名称】《计算机工程与设计》 【年(卷),期】2013(034)006

【摘要】为了解决Kerberos协议缺乏对计算机网络终端的保护的问题,引入可信计算技术对协议进行安全加固,加入对客户端完整性的验证,将数字签名引入传统的票据中,以保证客户端的完整性和密钥的安全性；在Linux下搭建可信计算平台,通过调用TPM功能,实现Kerberos协议的可信安全加固方案.验证平台表明,使用可信计算平台技术对Kerberos协议进行安全加固是切实可行的.%In order to solve the problem of that Kerberos protocol is lack of protection of network terminal.The technology of trusted computing is proposed to insure the security of Kerberos protocol.The digital signature and the validation of the integrated of client is introduced to ensure the integrity of the client and key safety.The trusted computing platform is set up on Linux system.And the trusted security reinforce scheme of Kerberos protocol is implemented by invoking TPM function.Validation show that the scheme of reinforcement of the Kerberos protocol is feasible by using trusted computing platform technology.

【总页数】5页(1946-1950)

【关键词】可信计算;可信平台模块;数字签名;完整性度量;签名密钥 【作者】温博为;吴振强;张丽娟