可信密码模块软件栈的数据加密策略  

Data Encryption Strategy Based on Trusted Computing Software Stack

作　　者：闫建红[1] 

机构地区：[1]太原师范学院计算机科学与技术系,山西太原030012

出　　处：《太原师范学院学报（自然科学版）》2012年第3期57-62,共6页Journal of Taiyuan Normal University:Natural Science Edition

基　　金：山西省高等学校科技项目(20101115)

摘　　要：介绍了关于可信计算和可信软件栈,并特别对可信计算模块的密钥设置和种类进行说明.从数据结构和加密过程两个方面对绑定和密封这两种方式的性能进行比较和分析,讨论其共同点和适用的范围,指出密封比绑定的功能更强大,安全性更高.实验表明,对数据绑定的时间要比密封需要的时间少,解除绑定的时间要比解除密封的时间少.在时间效率方面,可信计算的这两种数据保护方式只适用于较小数据量,而对大的数据量,其操作时间将会增加很多.The concept of trusted computing and the TCG Software Stack（TSS） was introduced.In particular,configurations and kinds of the Trusted Platform Module（TPM） was expounded.Performance between of binding and sealing was compared and analyzed from the data structure and encryption process.And similarities and applicable scope of them were discussed.It is concluded that sealing is more powerful than binding and its safety is also higher than binding.The test results show that data-binding need less time than data-sealing and data-unbinding need less time than data-unsealing.The two kinds of data protection method of trusted computing are only suitable for smaller data from the aspect of time efficiency.The time of encrypting and decrypting mass data increases greatly.

关 键 词：可信计算 可信计算模块密钥 数据绑定 数据密封 数据安全 

分 类 号：O223[理学—运筹学与控制论] C934[理学—数学]