Apparatus and method for issuer based revocation of direct proof and direct anonymous attestation

An apparatus comprising:

• a flash memory to store cryptographic information from an issuer;
• a trusted platform module (TPM) to convince a verifier that a TPM possesses cryptographic information from an issuer of a trusted membership group without disclosure of the cryptographic information or any unique device identification information of the apparatus;
• digital signature logic to issue a signature on a message received with an authentication request from a verifier;
• and
• denial of user revocation logic to convincing the verifier that a token generated during a join procedure with the issuer to establish membership within the trusted membership does not match any of the revoked tokens contained within a revocation list received with a denial of user revocation request from the verifier.

A system comprising:

• a verifier platform coupled to a network;
• and
• an anonymous prover platform coupled to the network, comprising:
• a bus,
• a processor coupled to the bus,
• a chipset coupled to the bus, including a trusted platform module (TPM), in response to a denial of user revocation request received over the network, the TPM to verify that membership of the user of the anonymous hardware device within a trusted membership group is not revoked according to an authenticated issuer revocation listed having a plurality of revoked tokens received by an issuer during join procedures to establish membership within a trusted membership group of the issuer and convincing the verifier that a token generated by an anonymous hardware device during a join procedure with the issuer does not match any of the revoked tokens received with the denial of user revocation.

An article of manufacture including a machine readable medium having stored thereon instructions which may be used to program a system to perform a method, comprising:

• issuing, by an anonymous hardware device, a digital signature to a verifier, the digital signature computed on a message received with an authentication request from the verifier;
• receiving a denial of revocation requests, including a plurality of revoked tokens received by an issuer during join procedures for a trusted membership group, the denial of revocation request received if membership of the anonymous hardware device within the trusted membership group created by the issuer is established by the verifier according to the digital signature;
• and
• convincing the verifier that a token generated by the anonymous hardware device during a join procedure with the issuer does not match any of the revoked tokens received by the issuer during the join procedures.