DAA (Direct Anonymous Attestation)

from wikipedia.org (http://en.wikipedia.org/wiki/Direct_Anonymous_Attestation)

Overview

The DAA protocol is based on three entities and two different steps. The entities are the TPM platform, the DAA Issuer and the DAA verifier. The issuer is charged to verify the TPM platform during the Join step and to issue DAA credential to the platform. The platform uses the DAA credential with the verifier during the Sign step. Through a zero-knowledge proof the verifier can verify the credential without attempting to violate the platform's privacy. The protocol also supports a blacklisting capability so that verifiers can identify attestations from TPM's that have been compromised.

Private CA의 부하를 해결하고 issuer(Private CA)와 verifier의 신뢰에 대한 문제를 해결하기 위해 1.2에서 새롭게 도입된 프로토콜.

'zero-knowledge proof'를 이용해서 인증을 확인한다.