基于信任度量的软件下载服务框架  

Software Download Framework Based on Trust Measurement

作　　者：李建[1,3] 何永忠[2] 徐开勇[1] 

机构地区：[1]信息工程大学电子技术学院,郑州市450004 [2]北京交通大学信息安全体系结构研究中心,北京100044 [3]广西军区司令部,南宁市530021

出　　处：《武汉大学学报（信息科学版）》2008年第10期1062-1066,共5页Geomatics and Information Science of Wuhan University

基　　金：国家863计划资助项目(2006AA01Z4402007AA01Z40)

摘　　要：针对移动终端软件下载方案缺乏信任度量而存在安全隐患的问题,利用身份管理的信任机制、可信计算安全存储和远程平台验证等安全特性,提出了基于信任度量的软件下载服务模型,设计了软件下载服务流程,研究了软件下载服务协议,分析了协议的安全性,比较了不同软件下载方案的安全性,分析结果表明该方案有效地提高了软件下载服务的安全性能。According to the fact that there are some secure faults in software download schemes due to the lack of trust measurement in software download for mobile equipments, making use of trust mechanism of identity management and secure characteristics such as integrity verification, protect storage, domain isolation, access control and remote platform verifying trusted computing possess, software download service model based on trust meas- urement of trusted identity management architecture has been put forward, software download service process has been designed, software download service protocol has been studied, the security performance of the protocol has been analyzed, the security performance comparison between several software download schemes has been made, the result shows that the scheme improve security performance of software download effectively.

关 键 词：信任度量 可信计算 身份管理 

分 类 号：TP311.56[自动化与计算机技术—计算机软件与理论] F270[自动化与计算机技术—计算机科学与技术]