Direct anonymous attestation-based apparatus and method
AssigneeIntel Corporation
InventorsAndrew Reinders, Manoj Sastry, Santosh Ghosh, Rafael Misoczki
Life of this patent
Estimating the term…
Abstract
A technique includes generating a direct anonymous attestation (DAA)-based signature to prove an electronic device is a member of a group. Generating the signature includes determining a reciprocal of a prime modulus, and determining the reciprocal of the prime modulus comprises left bit shifting a Barrett multiplier by a predetermined number of bits and multiplying a result of the left bit shifting of the Barrett multiplier with the prime modulus.
Claims18
A method comprising:
- an electronic device generating a Direct Anonymous Attestation (DAA) signature;
- the electronic device performing multiple iterations of a Barrett reduction to determine the reciprocal of a prime number, wherein a given iteration of the multiple iterations comprises left bit shifting a Barrett multiplier by a predetermined number of bits, multiplying a result of the left bit shifting of the Barrett multiplier with the prime number, subtracting a result of multiplying the result of the left bit shifting of the Barrett multiplier with the prime number from a set of most significant bits of the Barrett multiplier, and left bit shifting a result of the subtraction to form an input for another iteration of the multiple iterations;
- the electronic device determining the DAA signature based on the reciprocal of the prime number;
- and
- the electronic device communicating the DAA signature to a server to prove the electronic device is a member of a group.
An electronic device comprising:
- a network interface;
- and
- a cryptoprocessor to generate a Direct Anonymous Attestation (DAA) signature based on a private key and a public key and communicate the DAA signature using the network interface to a server to prove membership of the electronic device in a public group, wherein the cryptoprocessor to:
- perform multiple iterations of a Barrett reduction to determine the reciprocal of a prime number, wherein a given iteration of the multiple iterations comprises left bit shifting a Barrett multiplier by a predetermined number of bits, multiplying a result of the left bit shifting of the Barrett multiplier with the prime number, subtracting a result of multiplying the result of the left bit shifting of the Barrett multiplier with the prime number from a set of most significant bits of the Barrett multiplier, and left bit shifting a result of the subtraction to form an input for another iteration of the multiple iterations;
- and
- determine the DAA signature based on the reciprocal of the prime number.
A non-transitory storage medium to store instructions readable by a processor-based machine, wherein the instructions, when executed by a processor, cause the processor to:
- generate a Direct Anonymous Attestation (DAA) signature;
- perform multiple iterations of a Barrett reduction to determine the reciprocal of a prime number, wherein a given iteration of the multiple iterations comprises left bit shifting a Barrett multiplier by a predetermined number of bits, multiplying a result of the left bit shifting of the Barrett multiplier with the prime number, subtracting a result of multiplying the result of the left bit shifting of the Barrett multiplier with the prime number from a set of most significant bits of the Barrett multiplier, and left bit shifting a result of the subtraction to form an input for another iteration of the multiple iterations;
- determine the DAA signature based on the reciprocal of the prime number;
- and
- communicate the DAA signature to a server to prove an electronic device is a member of a group.
Dependencies are inferred from the claim text.