步骤

执行模块

命令

0.

User→LocCheck:

Memory areas MA

1a.

LocCheck→LICT:

Request PIK

1b.

LICT→LocCheck:

PIKpub

1c.

LocCheck

Generate hash (MA)

1d.

LocCheck→CA:

Hash (MA), PIKpub

2a.

CA

Select SPCR

2b.

CA→LocCheck:

SPCR

2c.

LocCheck→LICT:

MA, SPCR

3a.

LICT

Generate hash (MA)

3a.

LICT→TCM:

TCM_Quote(hPIK, passPIK, hash(MA), SPCR)

3b.

TCM

SM2(hash(MA), SPCR|PIKpriv) = SigMA

3c.

TCM→LICT

PCR[SPCR]

4a.

LICT→LocCheck:

PCR[SPCR], SML, SigMA

4b.

LocCheck→CA:

PCR[SPCR], SML, SigMA

5a.

CA

Verify SigMA

5b.

CA

Verify platform integrity

5c.

CA

Verify locM marked as verified

5d.

CA

Verify hash(MA)

6a.

CA→LocCheck:

Location locM confirmed

6b.

LocCheck→User:

Location locM confirmed