Linux可信引导技术研究  

RESEARCH ON LINUX TRUSTED BOOTING TECHNOLOGY

作　　者：曾勇军[1] 耿俊燕[1] 奚琪[1] 

机构地区：[1]解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机应用与软件》2009年第8期275-277,共3页Computer Applications and Software

摘　　要：可信计算对于信息系统的安全需求,提出了新的计算机系统安全解决方案,成为目前安全领域的研究热点。提出基于可信平台模块TPM(Trusted Platform Module)的Linux引导技术,阐述Linux引导模块之间信任链的建立及完整性度量的方法。任何模块加载执行之前必须通过完整性度量才能获得控制权,远程系统通过完整性度量值验证引导过程是否真实可信。According to security requirement of the information system, a new security solution for computer systems is presented by the trusted computing, which is now becoming a research hotspot. A trusted booting technology of Linux based on Trusted Platform Module is presented in this paper, the chains of trust between LimLx booting modules and the integrity measurement are described, any module seeking for obtaining control should be measured before to be loaded and executed, the trustworthiness of booting process is validated by remote system through its integrity measurement value.

关 键 词：可信计算 可信平台模块 GRUB BIOS 完整性度量 

分 类 号：TP316.81[自动化与计算机技术—计算机软件与理论] TP316[自动化与计算机技术—计算机科学与技术]