嵌入式终端可信计算环境的关键技术  

Key Technologies for Trusted Computing Environment on Embedded Terminal

作　　者：王震宇[1] 刘鑫杰[1] 任杰[1] 刘海雷[1] 吴杰[2] 

机构地区：[1]解放军信息工程大学信息工程学院,郑州450002 [2]中国人民解放军九五八七九部队,成都610081

出　　处：《计算机工程》2008年第22期239-241,244,共4页Computer Engineering

基　　金：国家“863”计划基金资助项目(2007AA01Z483)

摘　　要：阐述了在嵌入式终端上构建可信计算环境相关的嵌入式可信引导、TPM的扩展和驱动设计、嵌入式可信软件栈和嵌入式可信安全组件等关键问题。嵌入式可信引导可结合BR,USBKey和TPM等技术,保证用户、终端和应用三者间的可信认证。给出的嵌入式终端可信计算环境的方案保证了嵌入式可信平台的可重用性,同时也使平台具有更高的安全性和实用性。The paper discusses the key problems to build embedded trusted computing environment, such as embedded trusted boot process, the extension and driver design of TPM, embedded TSS and trusted security component. The embedded trusted boot process is able to ensure the trusted attestation among users, terminals and application by making a combination of BR, USBKey and TPM. The scheme is able to make embedded platform more secure, practical and reusable.

关 键 词：嵌入式终端 可信引导 可信软件栈 可信安全组件 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]