可信硬件平台的设计与实现  

Design and implementation of hardware platform for trusted computing

作　　者：郭灵儿[1] 蒋志翔[1] 

机构地区：[1]中国航天科工集团第二研究院706所,北京100854

出　　处：《计算机工程与设计》2011年第2期501-504,共4页Computer Engineering and Design

摘　　要：针对TCG可信平台的核心可信度量根不明确、缺乏有效的端口控制、对外接口速度低等缺陷,设计并实现了一种安全增强的可信硬件平台。该平台在借鉴TCG可信平台体系结构的基础上,以可信平台控制模块为核心可信度量根,解决了信任根的保护问题,同时实现了基于身份的I/O端口硬件控制,从而具有了更安全的可信启动、I/O有效控制等优点,可用在对可信安全要求较高的环境中。Aiming at the problems of ambiguous CRTM （core root of trust for measurement）, a lack of efficacious control of I/O port, and low speed interface, a security enhanced hardware platform of trusted computing is designed and implemented. Based on the trusted platform of TCG （trusted computing group）, this platform sets the trusted platform control module as the CRTM. The security problem of RTM （root of trusted measurement） is solved in this platform. And the hardware control of the I/O ports is implemented based on identity. Therefore, this platform possesses more powerful functions like safer root of trust, efficacious control of I/O, and so on. It can be used in the case which needs more security protection.

关 键 词：可信计算 可信平台 信任根 可信平台模块 可信平台控制模块 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]