基于统一可扩展固件接口的可信密码模块驱动研究与设计  

Research and design of trusted cryptography module driver based on unified extensible firmware interface

作　　者：朱贺新[1] 王正鹏 刘业辉[1] 方水平[1] 

机构地区：[1]北京工业职业技术学院信息工程系,北京100042 [2]瞬联软件科技(北京)有限公司,北京100102

出　　处：《计算机应用》2013年第6期1646-1649,共4页journal of Computer Applications

基　　金：北京工业职业技术学院青年基金资助项目(BGZYQN201212)

摘　　要：为扩展可信密码模块(TCM)的应用范围,提高终端与云平台的安全与可信性,在分析TCM的应用现状及发展趋势的基础上,提出了基于统一可扩展固件接口(UEFI)的TCM驱动架构,设计了基于该架构的底层驱动接口及核心协议。该驱动采用模块化设计,分层实现,将各层接口封装成协议并注册到UEFI系统,完成了底层数据流收发和协议封装。经过一致性测试、功能测试和压力测试,验证了该设计的准确性和有效性,并以产业界应用该模型的使用情况,验证了设计的实用性。To extend the application range of Trusted Cryptography Module （TCM） and promote the safety and credibility on terminal machine and cloud platform, this paper analyzed the status quo and tendency of TCM firmware, proposed a TCM firmware driver framework based on Unified Extensible Firmware Interface （ UEFI）, and designed low-level the driver interface and core protocol based on this framework. This TCM driver adopted module design and layered implementation, made the TCM protocol packaged and registered to UEFI firmware system, and completed the low-level data sending and receiving as well as protocol encapsulation. The test results of TCM firmware driver indicate the high accuracy and effectiveness for this design through the conformance test, functional test as well as pressure test. Besides, the industrial situation also illustrates the feasibility of this driver.

关 键 词：云计算 可信计算 可扩展固件接口 可信密码模块驱动 先入先出寄存器 

分 类 号：TP302.1[自动化与计算机技术—计算机系统结构] TP301.4[自动化与计算机技术—计算机科学与技术]