基于DTE策略的安全域可信隔离模型  

A Security Domain Trusted Separation Model Based on DTE Policy

作　　者：陈银镜[1] 蔡勉[1] 司丽敏[1] 郭颖[1] 

机构地区：[1]北京工业大学计算机学院,北京100124

出　　处：《中国电子商情（通信市场）》2010年第5期86-93,共8页

摘　　要：安全域隔离技术是构造可信系统的基本技术之一。本文运用可信计算的思想，在现何的安全域隔离模型的幕础上，定义了安全域间信任关系，提出了域间可信通信的可信管道机制，给出了安全域可信隔离模型的可信性状态，构建并形式化描述了基于DTE策略的安全域可信隔离模型，提供了验证模型可信的形式化分析方法，为安全域的可信隔离技术的实现和验证奠定了基础。Security domain isolated technology is one basic technologies of constructing a credible system. In this paper, it uses the idea of trusted computing. Base on the existing security domain isolated model, it defines the trusted relationship between the security domain, puts forward the believable pipe mechanism of reliable communication between the domain, gives the credibility state of credible isolation model of security domain, constructs and formal describes the security domain credible isolation model based on the strategy of DTE, provides a formal analysis method of validate credible model, laids the foundation for the implementation and verification of believable isolation technology of security domain.

关 键 词：安全域可信隔离 可信管道 形式化 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]