一个基于可信计算技术的可信下载协议  

Trusted download protocol based on trusted computing technology

作　　者：刘民岷[1] 孙世新[2] 刘璟[3] 

机构地区：[1]电子科技大学机械电子工程学院,成都610054 [2]电子科技大学计算机学院,成都610054 [3]冲山大学信息学院计算机系,广州510275

出　　处：《计算机工程与应用》2008年第16期126-128,共3页Computer Engineering and Applications

摘　　要：私有代理程序在开放网络中因为业务需要而进行迁移是一个常见的活动,如何保证接收方主机平台不受恶意程序攻击,同时又要确认接收方平台的可信度是一个具有普遍意义的问题。利用可信计算技术,设计了一个可信下载协议,有效地解决了上述问题,并利用AVISPA工具包对协议进行了验证,验证结果表明该协议实现了双向平台完整性鉴别、双向实体鉴别以及私有代理程序在迁移过程中的机密性和完整性。It is very common that proprietary agent has to migrate in the environment of open network to fulfill the business logic efficiently.In this case,how to protect the recipient＇s platform from malicious code,and at the same time how to attest to the trustworthiness of the recipient＇s platform by the recipient are both typical problems.Utilizing trusted computing technology,we design a trusted download protocol and solve the aforementioned problems efficiently.We also use AVISPA toolset to verify this protocol and the results of verification demonstrate that this protocol does realize mutual platform integrity authentication,mutual entity authentication and confidentiality and integrity of proprietary agent during transit.

关 键 词：可信计算 可信下载 私有代理程序 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]