国产自主平台下可信执行环境的设计与实现  

Design and implementation of trusted execution environment under domestic independent platform

作　　者：敬军[1] 郝福珍[1] 徐东华[1] 

机构地区：[1]华北计算技术研究所,北京100083

出　　处：《计算机工程与设计》2012年第10期3801-3806,共6页Computer Engineering and Design

基　　金：中国电子科技集团公司创新基金项目(JJ0708007)

摘　　要：针对目前国产自主平台对应用程序执行缺乏有效安全管控的问题,根据可信计算基本原理,提出了一种国产自主平台下构建可信执行环境的方法。设计并实现了国产自主平台下的可信执行环境,在应用程序启动之前,完成对应用程序启动的可信验证,主动保护应用程序执行的安全性。实验表明该方法切实可行,具备执行效率高的优点,为国产自主平台下应用程序的安全执行提供了一种有效的安全管控措施。Aiming at the problem that the domestic independent platform is lack of effective and safe control, the method of building the trusted execution environment for the domestic independent platform is presented according to the basic principle of the trusted computing. The function of the trusted execution environment is designed and realized on the domestic independent platform, the trusted authentication to execution of applications is completed before the applications run. In this way, the safety of the execution of applications is protected forwardly. The experimental results show that the method is feasible, has high effi- ciency and provides one effective and safe measure for the domestic independent platform to ensure the execution of the applica- tions.

关 键 词：可信计算 可信执行环境 完整性度量 可信密码模块 LINUX安全模块 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]