基于可信计算的密级标识信息控制模型  

Classification Identification and Information Control Model based on Trusted Computing

作　　者：邓子建[1] 谭兴烈[1] 董贵山[1] 

机构地区：[1]成都卫士通信息产业股份有限公司,四川成都610041

出　　处：《信息安全与通信保密》2011年第11期83-85,共3页Information Security and Communications Privacy

摘　　要：借助可信计算的完整性检验、认证及访问控制和密封存储等关键技术,在现有PC体系结构下提出了支持可信计算的密级标识信息控制模型,并提出密级权限域的概念。该模型利用PC机USB接口外接TCM,结合身份认证、基于角色的访问控制和信道加密技术,从不同层次和角度进行涉密文档保护,实现用户细粒度控制和信息流控制。同现有的技术相比较,该模型能够满足国家相关标准的技术要求,实现更灵活、更安全的信息控制,并能够适应新的Cyber Security环境下的安全挑战。With the aid of trusted computing technologies,such as integrity,authentication,access control and sealed storage,the classification identification and information control model in support of trusted computing is proposed under the current PC architecture,including the concept of classification authority domain. This model,by PC USB interface and in combination of identity authentication,role-based access control and channel encryption,could protect the classified documents from different levels and implement information flow control. Compared with the existing technologies,this model could meet the technical requirements of the related national standards,achieve more flexible and secure information control,and adapt to new security challenges in Cyber security environment.

关 键 词：可信计算 密级标识 分级保护 信息控制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]