A secure channel establishment method on a hardware security module

In various computing environments, hardware security modules are needed for protecting cryptographic keys and security services from threats of information leakage. For that protection, the modules normally have the methods of password-based access control and message encryption. Nowadays, a password itself can be easily exposed by a variety of password hacking techniques and the secure channel for encrypting messages can be connected to a malicious program which already knows the password. Moreover, frequent password inputs are inconvenient to users. To solve these problems, we propose an enhanced secure channel establishment method on a hardware security module. The method has been implemented on our prototype mobile trusted module.