一个基于进程保护的可信终端模型  

Trusted Terminal Model Based on Process Protection

作　　者：陈菊[1] 谭良[1] 

机构地区：[1]四川师范大学计算机科学学院四川省可视化计算与虚拟现实重点实验室,成都610101

出　　处：《计算机科学》2011年第4期115-117,150,共4页Computer Science

基　　金：国家自然科学基金面上项目(60970113);四川省科技厅项目(2008JY0105-2);四川省教育厅项目(07ZA091)资助

摘　　要：针对计算机终端是网络系统中安全风险的根源问题之一,提出了一种新的基于进程保护的可信终端模型。该模型通过进程静态、动态保护和进程间无干扰来判定系统的可信性。进程静态保护的主要功能是确保进程代码和辅助文件的完整性,进程动态保护的主要功能是防止进程运行的相关数据被篡改,进程间无干扰的功能是基于无干扰理论判断进程交互的合法性。理论分析结果表明,该模型的可信性与基于可信根的无干扰可信模型等价。但该模型不仅有效克服了基于可信根的无干扰可信模型中的可信传递函数check()的不合理性,而且将系统的状态、动作具体化,使得该模型更直观、具体,更容易理解,与实际的终端系统更相符。Aimed at the problem that the computer terminal is the source of the safe risk in the network system,this paper proposed a new reliable terminal model based on non-interference theory.It asserts the system＇s trust by the protection of static and dynamic process and non-inference among processes.The main function of static process protection is to protect the integrity of the process＇s code and the auxiliary file.The main function of dynamic process protection is to prevent the related data from being tampered.The function of non-inference among process is to judge the legitimacy of process alternation.The theoretical security analysis shows that the credibility of this model equals the non-interference model based on the trusted root.However,this model not only overcomes the trusted transfer function＇s irrationality of the non-interference trusted model based on trusted root,but also externalizes system static and action.Then it is more intuitive,concrete,easier to understand and in line with the actual terminal system.

关 键 词：无干扰理论 进程保护 可信终端 可信根 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]