An E-commerce Anonymous Attestation Model Based on Trusted Computing Theory

In this paper, the authors analyze the shortages exist in e-commerce's traditional security authentication model, aiming at these shortages, the authors introduce trusted computing theory into this paper, and use TPM chip as a trusted root can report the current environment and identify the user and system safely, thus ensuring the security of terminal platform; meanwhile, to some extent, direct anonymous attestation scheme based on trusted computing can replace CA, providing authentication function in e-commerce to make sure both dealer' identity and customer's are credible. The authors also extent this attestation scheme model into multi-domain, making different dealers in different trusted domain can do business more convenient, and meet the security requirements and anonymity.