Establishing trust without revealing identity
AssigneeIntel Corporation
InventorErnie F. Brickell
Life of this patent
Estimating the term…
Abstract
A method, system, and apparatus are provided for establishing trust without revealing identity. According to one embodiment, values in a first proof corresponding to a first statement are precomputed, a request for a second proof is received from a challenger, and the first and second proofs are completed.
Claims30
A method comprising:
- precomputing a plurality of values in a first proof corresponding to a first statement;
- receiving a request for a second proof from a challenger;
- completing the first proof;
- and
- completing the second proof.
The method of clam 3, wherein the second statement comprises holding a cryptographic key on a trusted hardware device.
A method comprising:
- initiating a precomputation for an attestation indentity key (AIK) by a platform;
- generating an AIK private-public key pair;
- and
- generating an interactive proof (IP) that a private AIK is on a trusted hardware device.
A method comprising:
- selecting a random value r from a nonuniform distribution;
- adding the value r to a secret value m to generate a value r+m;
- preserving the value r and the value r+m;
- and
- revealing the value r or the value r+m.
A method comprising:
- committing to a first value;
- committing to an output of a plurality of rounds of an interactive proof, revealing the first value;
- and
- calculating choices using the first value and the output of the plurality of rounds of the interactive proof.
An apparatus comprising:
- a challenger device;
- and
- a prover device communicatively coupled with the challenger device, wherein the prover device to:
- precompute a plurality of values in a first proof corresponding to a first statement;
- receive a request for a second proof from the challenger device;
- complete the first proof;
- and
- complete the second proof.
A system comprising:
- a storage device;
- a processing unit coupled with the storage device;
- a communication port coupled with the processing unit;
- a prover device coupled with a challenger device via the communication port, wherein the prover device to:
- precompute a plurality of values in a first proof corresponding to a first statement;
- receive a request for a second proof from the challenger device;
- complete the first proof;
- and
- complete the second proof.
A machine-readable medium having stored thereon data representing sequences of instructions, the sequences of instructions which, when executed by a machine, cause the machine to:
- precompute a plurality of values in a first proof corresponding to a first statement;
- receive a request for a second proof from a challenger;
- complete the first proof;
- and
- complete the second proof.
A machine-readable medium having stored thereon data representing sequences of instructions, the sequences of instructions which, when executed by a machine, cause the machine to:
- initiate a precomputation for an attestation indentity key (AIK) by a platform;
- generate an AIK private-public key pair;
- and
- generate an interactive proof (IP) that a private AIK is on a trusted hardware device.
Dependencies are inferred from the claim text.