基于TCM的可信签名系统设计  

Design of trusted signature system based on TCM

作　　者：池亚平[1] 漆佑军[1,2] 魏占祯[1] 方勇[1] 

机构地区：[1]北京电子科技学院通信工程系,北京100070 [2]西安电子科技大学通信学院,陕西西安710071

出　　处：《计算机工程与设计》2011年第7期2256-2259,共4页Computer Engineering and Design

基　　金：国家自然科学基金项目(60951001);国家科技支撑计划重点基金项目(2009BAH52B06);北京市自然科学基金项目(4102057);中办信息安全重点实验室基金项目(YZDJ0806)

摘　　要：针对普通PC环境下的电子签名可能被恶意程序篡改、不能保证电子签名的真实性的问题,提出一种基于可信计算技术和嵌入式技术的嵌入式可信签名系统。该系统基于TCM设计了一个嵌入式可信电子签名终端,通过信任链的建立和平台完整性的证明构建了可信签名环境,并设计了可信环境下的签名和验签方案。由于系统设计的信任链基于嵌入式系统的核心可信度量根CRTM,信任链在终端启动时即开始建立,而非系统硬件启动后进行,保证了信任链的完整性和签名环境的可信性。Aimed at the problem that he E-signature is usually forged by malicious code in common PC at present and the authenticity of the E-signature is hard to be guaranteed, a solution of embedded trusted E-signature system is proposed, on the foundation of trusted computing and embedded technology. The system designs a trusted E-signature terminal basing on trusted cryptography module （TCM）, and constructs a trusted E-signature environment by establishing trusted chain and implementing the platform integrity attestation in the terminal. Finally, a signature scheme and a verify scheme are designed on the trusted E-signature environment. Because the trusted chain designed in the system is based on core root of trust for measurement （CRTM） on the embedded system, the trusted chain is established when systerm booting, instead of after booting. So, the system can ensure the integrity of the trusted chain and the creditability of E-signature environment.

关 键 词：可信密码模块 签名终端 嵌入式系统 可信计算 电子签名 

分 类 号：TP309.02[自动化与计算机技术—计算机系统结构]