基于策略的语义远程认证  

Policy-based Semantic Remote Attestation

作　　者：屈军瑞[1] 彭新光[1] 

机构地区：[1]太原理工大学计算机与软件学院,太原030024

出　　处：《电脑开发与应用》2010年第7期14-16,77,共4页Computer Development & Applications

基　　金：山西省自然科学基金资助项目(2009011022-2);山西省留学科研基金资助项目(2009-28)

摘　　要：远程认证在可信计算中起着重要作用,它能提供可信环境存在的可靠证据。目前的方法是测量目标平台的二进制码、配置文件、属性或者安全策略等可信值。所有这些认证方法是静态的,缺乏动态行为认证并且没有对于实际的行为进行说明和规范。为了改进和完善这些认证方式,提出了一种语义远程认证策略,并对其进行了定义、规范和证明。该策略是把使用控制模型和行为结合起来,能够动态测量远程平台的行为。Remote attestation plays an important role in trusted computing,which can provide reliable evidence for existence of a trusted environment.Existing approaches for the realization of remote attestation measure the trustworthiness of a target platform from its binaries,configurations,properties or security policies.All these approaches are static,and none of them define what a trusted behavior actually is and how to specify it.In this paper,we propose a novel attestation policy,which is based on the behavior.This policy associate usage controland behavior which can dynamically measure the behavior of a remote platform.

关 键 词：可信计算 远程认证 语义远程认证策略 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]