Establishing trust without revealing identity

Abstract

A method, system, and apparatus are provided for establishing trust without revealing identity. According to one embodiment, values in a first proof corresponding to a first statement are precomputed, a request for a second proof is received from a challenger, and the first and second proofs are completed.

1 . A method comprising:
 initiating a precomputation for an attestation indentity key (AIK) by a platform;   generating an AIK private-public key pair; and   generating an interactive proof (IP) that a private AIK is on a trusted hardware device.   
   
   
       2 . The method of  claim 1 , further comprising generating a value h, wherein the value h is unique to the AIK. 
   
   
       3 . The method of  claim 2 , further comprising computing a value k defined as k=h m  mod P. 
   
   
       4 . The method of  claim 3 , wherein m is a randomly generated number and P is a large prime number. 
   
   
       5 . The method of  claim 1 , further comprising:
 committing to a first value;   committing to an output of a plurality of rounds of an interactive proof;   revealing the first value; and   calculating choices using the first value and the output of the plurality of rounds of the interactive proof.   
   
   
       6 . The method of  claim 5 , wherein committing to the first value comprises a computing a cryptographic hash of the first value and sending the cryptographic hash to a prover. 
   
   
       7 . The method of  claim 5 , wherein the committing to the output comprises computing a cryptographic hash of the first value and sending the cryptographic hash to a challenger. 
   
   
       8 . A machine-readable medium having stored thereon data representing sequences of instructions, the sequences of instructions which, when executed by a machine, cause the machine to:
 initiate a precomputation for an attestation indentity key (AIK) by a platform;   generate an AIK private-public key pair; and   generate an interactive proof (IP) that a private AIK is on a trusted hardware device.   
   
   
       9 . The machine-readable medium of  claim 8 , wherein the sequences of instructions which, when executed by the machine, further cause the machine to: generate a value h, wherein the value h is unique to the AIK. 
   
   
       10 . The machine-readable medium of  claim 2 , wherein the sequences of instructions which, when executed by the machine, further cause the machine to: compute a value k defined as k=h m  mod P. 
   
   
       11 . A system comprising:
 a storage medium;   a processing unit coupled with the storage medium;   a communication port coupled with the processing unit; and   a prover device coupled with a challenger device via the communication port, wherein the prover device to:
 initiate a precomputation for an attestation indentity key (AIK) by a platform, generate an AIK private-public key pair, and 
 generate an interactive proof (IP) that a private AIK is on a trusted hardware device. 
   
   
   
       12 . The system of  claim 11 , wherein the prover device is further to generate a value h, wherein the value h is unique to the AIK. 
   
   
       13 . The system of  claim 12 , wherein the prover device is further to compute a value k defined as k=h m  mod P. 
   
   
       14 . The method of  claim 13 , wherein m is a randomly generated number and P is a large prime number.