A Separated Domain-Based Kernel Model for Trusted Computing  

作　　者：FANG Yanxiang SHEN Changxiang XU Jingdong WU Gongyi 

机构地区：[1]College of Information Technical Science, Nankai University, Tianjin 300071, China [2]Naval Institute of Computing Technology, Beijing 100841, China

出　　处：《Wuhan University Journal of Natural Sciences》2006年第6期1424-1428,共5页武汉大学学报（自然科学英文版）

基　　金：Supported bythe National Basic Research Programof China (G1999035801)

摘　　要：This paper fist gives an investigation on trusted computing on mainstream operation system （OS）. Based on the observations, it is pointed out that Trusted Computing cannot be achieved due to the lack of separation mechanism of the components in mainstream OS. In order to provide a kind of separation mechanism, this paper proposes a separated domain-based kernel model （SDBKM）, and this model is verified by non-interference theory. By monitoring and simplifying the trust dependence between domains, this model can solve problems in trust measurement such as deny of service （DoS） attack, Host security, and reduce the overhead of measurement.This paper fist gives an investigation on trusted computing on mainstream operation system （OS）. Based on the observations, it is pointed out that Trusted Computing cannot be achieved due to the lack of separation mechanism of the components in mainstream OS. In order to provide a kind of separation mechanism, this paper proposes a separated domain-based kernel model （SDBKM）, and this model is verified by non-interference theory. By monitoring and simplifying the trust dependence between domains, this model can solve problems in trust measurement such as deny of service （DoS） attack, Host security, and reduce the overhead of measurement.

关 键 词：noninterference teory separation kernel trusted computing 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]