可信计算技术在嵌入式操作系统中的应用  

Application of Trusted Computing Technology in Embedded Real-Time Operating System

作　　者：徐明迪[1] 张帆[2,3] 

机构地区：[1]武汉数字工程研究所,湖北武汉430074 [2]杭州电子科技大学通信工程学院,浙江杭州310018 [3]武汉轻工大学数学与计算机学院,湖北武汉430023

出　　处：《武汉大学学报（理学版）》2014年第3期237-241,共5页Journal of Wuhan University:Natural Science Edition

基　　金：国防预研基金(9140A15040211CB3901);国家自然科学基金(61003268);浙江省教育厅基金资助项目(Y201224055)

摘　　要：针对通用可信计算技术难以直接满足嵌入式操作系统实时性要求的问题,通过对现有可信计算信任链进行裁剪,提出了一种基于完整性度量证书的信任链结构,在嵌入式操作系统内核中构造了嵌入式实时可信平台模块和可信软件栈.实验表明,嵌入式可信平台模块的平均命令执行时间节省了65.81%,嵌入式系统中的应用程序可实现密封存储、远程证明和完整性度量等可信计算功能,研究方案在总体上能够满足嵌入式系统的实时性和安全性要求.The existing trusted computing technology （TCT） is hard to satisfy the real time property of embedded operating system （EOS） direclly. Firstly, this paper put forward a new chain of trust based on integrity measurement certificate by reducing legend TCG＇s chain of trust. Secondly, this paper designed the embedded real-time trusted computing module and trusted software stack which had been reduced and optimized. The average execution time of commands on embedded real-lime trusted platform module saved 65. 81% execution time. The applications in EOS could run using functions of sealed storage, remote attestation and integrity measurement. The experimental results showed that the scheme can meet the EOS＇s requirements of real-time and security as a whole.

关 键 词：嵌入式操作系统 可信计算技术 完整性度量证书 实时调度 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]