Security Analysis of OIAP Implementation Based on BAN Logic

In the specification of trusted platform module (TPM), object-independent authorization protocol (OIAP) is the protocol which guarantees the security of the communication between TPM and its users. Nowadays, there are many TPM manufacturers having made their own TPM. However, some of the TPM manufacturers don´t implement the TPM completely according to the specification of TPM. In this paper, BAN logic is used to construct an ideal model of OIAP. The security of the OIAP implemented by some TPM manufacturers is analyzed with the initial hypothesis and the logic postulate. From the result of analyzing, the inappropriate implementation of OIAP by the TPM manufacturers would lead to a replay attack, and the data in the data integrity register (DIR) and non-volatile (NV) storage would be contaminated by this attack.