基于移动可信平台模块的通用PC机系统可信增强  

Trust Enhancement of General Personal Computer Based on Removable TPM

作　　者：唐为民[1] 高兰[2] 彭双和[1] 韩臻[1] 沈昌祥[3] 

机构地区：[1]北京交通大学计算机与信息技术学院,北京100044 [2]第二炮兵装备研究院,北京100085 [3]北京工业大学计算机学院,北京100022

出　　处：《武汉大学学报（理学版）》2009年第1期22-26,共5页Journal of Wuhan University:Natural Science Edition

基　　金：国家高技术研究发展计划(863)项目(2007AA012410,2007AA012177);北京交通大学科技基金(2008RC021)资助项目

摘　　要：为了提高终端安全性能,提出并实现了移动可信平台模块(RTPM)和在其支持下的通用PC机系统可信增强架构及原型设计方案.RTPM通过USB接口与计算机平台连接,可接管启动控制权对后续启动的系统进行可信度量.该架构以RTPM为支撑实现完整的系统可信引导,将可信计算机制扩展到操作系统和应用层,在不改变PC机硬件结构和通用计算机基本输入输出系统的情况下构建可信计算环境,为终端安全技术手段提供基础支撑,具有很强的实用性.In order to enhance the security of terminals computer,this paper presents a design of the Removable Trusted Platform Module（RTPM） and a new architecture of trusted enhancement on general personal computer based on RTPM and its prototype.RTPM that connect with computer through USB can take over the control of booting and validate integrity of following bootstrap process.The architecture can accomplish trusted bootstrap of computer system completely supported by RTPM and broaden the trusted mechanism to operating system and applications.The architecture builds a trusted computing environment on general personal computer without modifying hardware platform and BIOS,can support security module effectively.

关 键 词：可信计算 可信平台模块 可移动 安全 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]