A New Authorization Protocol for Trusted Computing
Xing Zhang, Xiaofei Zhang, Shen Chang-xiang · 2007
The paper analyses the security of the authorization protocols in the v1.2 specification of TPM. It points out that these protocols have some shortcomings such as function overlap, and the leakage of verifying authenticated data. Then a new authorization protocol, which protects the integrity and confidentiality of the communication data, is proposed. It can also prevent replay attacks. Most kinds of TPM operations can be implemented by the protocol.