步骤

执行模块

命令

1a.

LICT→TCM:

TCM_TakeOwnership

1b.

LICT→TCM:

TCM_MakeIdentity

1c.

TCM

Generate (PIK_priv, PIK_pub)

1d.

TCM

PR = PIK_pub, EC, PC, CC

1d.

TCM

SM2_Sign (PR|PIK_priv) = Sig

2.

LICT→CA:

PR, Sig

3a.

CA

Verify Credentials

3b.

CA

Verify SM2_Verify(Sig|EK_pub) = PR

3c.

CA

Generate PIC

3d.

CA

Generate K

3e.

CA

SM2_Enc(K|EK_pub)

3f.

CA

Sym_Enc(PIC|K)

4.

CA→LICT:

SM2(K|EK_pub), Enc(PIC|K)

5a.

LICT→TCM:

TCM_ActivateIdentity

5b.

TCM

Decrypt K

5c.

TCM

Decrypt PIC

6a.

LICT→TCM:

TCM_Quote(h_PIK, pass_PIK, loc_M, S_PCR)

6b.

TCM

SM2_Sign(loc_M, S_PCR|PIK_priv) = SigL

6c.

LICT→CA:

loc_M, PCR[S_PCR], SML, SigL

7a.

CA

Verify SigL

7b.

CA

Verify platform integrity

7c.

CA

Verify loc_M

7d.

CA

Mark loc_M of M as verified