Abstract: This paper introduces TPM key storage management mechanism in trusted computing, and analyzes the problems of TPM key storage management. A TPM key object loading scheme based on identity is designed to solve the problems, such as large amount of calculation, storage process complex small memory space and operating cumbersome etc. The scheme applies identity cryptosystem which is the highest encryption in the current system of public key encryption, and optimizes the internal storage space and the system overhead in traditional key management.

Key words: Trusted Platform Module（TPM）, identity, key, storage management

摘要： 介绍了TPM密钥管理在可信计算中的存储管理机制，分析了TPM密钥存储管理存在的问题。针对TPM密钥管理中密钥计算量大、存储过程复杂、内存空间小、用户操作繁琐等问题，设计了一个基于身份的TPM密钥对象存储方案。该方案利用了目前公钥体制中加密强度最高的身份密码体制，解决了传统的密钥管理固有的内部存储空间和系统开销过大的问题。

关键词: 可信平台模块, 身份, 密钥, 存储管理