基于扩展ROM的信任根设备设计与实现  

Design and implementation of root of trust device based on expansion ROM

作　　者：鲁青远[1] 郝福珍[1] 牛峰[1] 

机构地区：[1]华北计算技术研究所,北京100083

出　　处：《计算机工程与设计》2012年第6期2178-2181,2276,共5页Computer Engineering and Design

基　　金：中国电子科技集团公司创新基金项目(JJ0708007)

摘　　要：针对目前仍在大量使用的PC机上没有可信模块芯片,无法部署可信安全机制的现状,提出了基于扩展ROM的信任根设备。该设备将国产可信模块芯片TCM与PCI扩展ROM部署在同一块PCI板卡上,以BIOS插件的形式,在扩展ROM中完成对BIOS和OS Loader的完整性认证。在分析了PCI/PNP扩展ROM机制、BIOS的引导流程、哈希值软硬件相结合的二级计算方式等的基础上,设计和实现了信任根设备,为可信计算技术在传统计算机上的部署提供了一种新的技术途径。Though there are many computers are used,on which people make no use of trusted computing technology,as there is no trusted module chip on their mainboards.A RTD（root of trust device） system according to the problem is designed.In RTD,a TCM chip and an EEPPROM are put into the same PCI-card.The code in the EEPROM called as PCI/PNP expansion ROM,attests the authentication of the BIOS and the OS Loader.By analyzing the mechanism of PCI/PNP expansion ROM,the boot sequence of the BIOS,and the twice compute mechanism of hash value,the RTD implemented,which points out a new way to implement the trusted computing technology in the traditional computing.

关 键 词：可信计算 核心可信测量根 信任链 可信计算模块 扩展只读存储器 基本输入输出系统 外围组件扩展接口/即插即用 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]