Method and system for distributing attestation key and certificate in trusted computing

A computer system, comprising:

• a processor;
• and
• a storage device coupled to the processor and storing instructions, which when executed by the processor cause the processor to perform a method for secure attestation, the method comprising:
• receiving, by a trusted module associated with a root of trust of a trusted platform, a request for an attestation key from an application module configured to run an application on the trusted platform, wherein the request comprises a first random number generated by the application module and an application-identifier associated with the application;
• computing an attestation public/private key pair by performing an encryption operation based on a combination of the first random number generated by the application module, a second random number generated by the trusted module, and the application-identifier;
• computing identity information of the trusted module based on both a unique identifier of the trusted module and the public key of the attestation public/private key pair;
• and
• transmitting, by the trusted module, the public key of the attestation public/private key pair and the identity information of the trusted module to the application module, thereby enabling the application module to verify the public key of the attestation public/private key pair based on the identity information of the trusted module.

A computer-implemented method for obtaining an attestation key, the method comprising:

• transmitting, by an application module running an application on a trusted platform, a request for the attestation key to a trusted module associated with a root of trust of the trusted platform, wherein the request comprises a first random number generated by the application module and an application-identifier associated with the application;
• receiving, by the application module from the trusted module, a public key of an attestation public/private key pair, identity information of the trusted module, and an endorsement certificate encrypted using the first random number, wherein the identity information of the trusted module and the endorsement certificate each comprises a unique identifier of the trusted module, and wherein the attestation public/private key pair is computed by performing an encryption operation based on a combination of the first random number, a second random number generated by the trusted module, and the application-identifier;
• decrypting, using the first random number, the encrypted endorsement certificate;
• extracting the unique identifier of the trusted module included in the endorsement certificate;
• comparing the unique identifier of the trusted module extracted from the endorsement certificate and the unique identifier included in the identity information of the trusted module in order to verify the public key of the attestation public/private key pair;
• and
• in response to a successful verification of the public key of the attestation public/private key pair, keeping the public key of the attestation public/private key pair.