基于TCM的嵌入式可信终端系统设计  

Design of embedded trusted terminal system based on TCM

作　　者：李小将[1] 梅栾芳[1] 师俊芳[1] 陈娟[1] 

机构地区：[1]装备指挥技术学院,北京101416

出　　处：《计算机工程与设计》2010年第4期733-735,808,共4页Computer Engineering and Design

摘　　要：针对目前各种嵌入式终端的安全需求,借鉴普通安全PC中TPM的应用情况,结合操作系统微内核技术,提出一种嵌入式可信终端设计方案,该方案基于可信根TCM,实现了自启动代码、操作系统到上层应用程序的"自下而上"的可信链传递,适用于嵌入式终端的安全应用。最后,通过设计一个试验系统,重点阐述了可信启动的具体实现步骤,并分析了因此带来的性能变化。According to the nowadays security requirement faced by embedded terminal,a design of embedded trusted terminal system is proposed to resolve the security problem referring to TPM application for the common security computer and microkernel technology.On basis of the TCM（trusted cryptography module） this scheme realizes trusted Bootloader,trusted operating system,trusted application program and constructs a integrated trusted chain from bottom to top,which is used in many security areas.Based on these,an experimental prototype is provided as an example to demonstrate the steps of implementing the trusted setup,and the result influence of performance is analyzed.

关 键 词：可信密码模块 嵌入式终端 微内核 可信根 可信链 

分 类 号：TP303[自动化与计算机技术—计算机系统结构]