可组合认证：面向AI驱动分布式系统的连续和增量信任通用框架
Composable Attestation: A Generalized Framework for Continuous and Incremental Trust in AI-Driven Distributed Systems
AI总结：
本文提出可组合认证框架，通过模块化和密码学安全的方法，实现AI驱动分布式系统的连续和增量信任验证。
摘要：
本文提出可组合认证作为一种通用的密码学框架，用于连续和增量信任在分布式系统中，如人工智能（AI）计算和开源软件（OSS）供应链验证。我们建立了一个严谨的数学基础，定义了此类认证系统的核心属性：可组合性、顺序独立性、传递性、确定性、包含性以及动态组件验证。与传统的依赖于单体验证的认证方法不同，可组合认证支持模块化、可扩展且具有密码学安全性的完整性验证，适应于不断变化的系统配置。本文引入了通用的认证证明生成和验证函数，可通过多种密码学构造实现，其中Merkle树在构建可组合认证证明中起关键作用。其他构造包括基于累积器的方案和多重签名方法，也进行了探索，每种都呈现出在性能、安全性和功能上的不同权衡。形式分析展示了这些实现对基本属性的符合。该框架的实用性扩展到安全的AI模型完整性验证、联邦学习和运行时信任保证等应用。引入了认证包含的概念，允许增量集成新组件而无需进行完整的系统重新认证。这种通用的方法通过密码学可验证的证明机制增强了AI计算和更广泛的分布式计算环境中的信任，建立在基础的可信启动概念之上。
英文摘要：
This paper presents composable attestation as a generalized cryptographic framework for Continuous and Incremental Trust in Distributed Systems,such as Artificial Intelligence (AI) computation, and Open Source Software (OSS) supply chain verification. We establish a rigorous mathematical foundation which is defining core properties of such attestation systems: composability, order independence, transitivity, determinism, inclusion, and dynamic component verification. In contrast to traditional attestation methodologies relying on monolithic verification, composable attestation facilitates modular, scalable, and cryptographically secured integrity verification adaptable to evolving system configurations. This work introduces generalized attestation proof generation and verification functions, implementable via a variety of cryptographic constructions, in which Merkle trees plays vital role in constructing the composable attestation proof. Alternative constructions, including accumulator-based schemes and multi-signature approaches, are also explored, each presenting distinct trade-offs in performance, security, and functionality. Formal analysis demonstrates the adherence of these implementations to the fundamental properties . The framework's utility extends to applications such as secure AI model integrity verification , federated learning, and runtime trust assurance. The concept of attestation inclusion is introduced, permitting incremental integration of new components without necessitating full system re-attestation. This generalized approach reinforce trust in AI computation and broader distributed computing environments through cryptographically verifiable proof mechanisms, building upon foundational concepts of bootstrapping trust.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
