一个面向智能电话的移动可信平台设计  

Mobile Trusted Platform Model for Smart Phone

作　　者：杨健[1,2] 汪海航[1] Fui Fui Wong 于皓[1] 

机构地区：[1]同济大学电子与信息工程学院,上海201804 [2]大理学院数学与计算机学院,大理671003

出　　处：《计算机科学》2012年第8期20-25,共6页Computer Science

基　　金：上海市科委2010年专项基金项目(10490503700)资助

摘　　要：由于手机病毒或设备失窃,导致手机上的私密数据面临泄漏的危险。为了满足移动平台的安全需求,TCG的MPWG提出移动可信平台规范。然而MPWG并没有明确规定特定的技术方法来实现移动可信模块(MTM),现有研究中没有整体的可实际部署于智能手机环境的MTM平台框架性设计,对可信软件栈(TSS)也没有可以实施的详细的部署方案。设计了一个面向智能手机的移动可信平台服务模型,它将基于TrustZone的纯软件MTM实现与基于Java Card的智能卡MTM实现结合起来构建两个可信引擎。提出其中可信构建块的部署流程并对其安全性进行了分析。As virus or equipment lost,secret data on mobile phone is facing the danger of leakage.To meet the security needs of mobile platforms,TCG’s MPWG has proposed the Mobile Trusted Platform specification,which does not spe-cify a particular technical approach to design a Mobile Trusted Module（MTM）.Existing research does not provide an overall framework of the MTM,which can actually be used in the smart phone environment,and nor a detailed deployment process of the Trusted Software Stack（TSS） of the framework.A model design on mobile trusted platform for smart phone was proposed in this paper,which combines the pure software MTM based on TrustZone technology with smart card MTM based on Java Card to build two trusted engines.The deployment scheme of trusted computing bases and security analysis of this model were put forward as well.

关 键 词：移动可信平台模块 TRUSTZONE 智能卡 Java CARD 可信软件栈(TSS) 软件部署 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]