An improved design of clone TPM detecting

Aming at the difficulties of detecting clone TPM in DAA protocol using variable basename, a new method to detect clone TPM was proposed, which offers TPM high degree of anonymity. DAA certificate issuer has a new public-key PKN besides primary public-key PK. Every TPM has two certificate: DAA certificate and DAAN certificate, DAA certificate issuer detects clone TPM by DAA_N certificate and validates TPM identity by DAA certificate. Analysis and simulation are conducted for our detecting method and exiting proposals. The results show that our detecting method has high detection rate and low leak alarm rate. It is easy that the method can be deployed in those systems that have online TTP.