TPM Based Key Backup and Recovery

This paper presents a secure solution to backup and recover keys with TPM based KMC (Key Management Center). By hardware protected capabilities and hardware protected storage provided by TPM, KMC can achieve the security goals of backuping and recovering keys for different platforms whereas securing them from being leaked out in a third party facility. To make the solution feasible and practicable, an algorithm based on the adjacency matrix that reflects the wrapping hierarchy among the keys to be protected by KMC is detailed. Through a Path Matrix for platform specific key branch, KMC can rapidly determine the path from SRK (Storage Root Key) to the target key and efficiently backup or recover the target key.