一种自主可控可信计算平台解决方案  

An Independent Controllable Scheme of Trusted Computing Platform

作　　者：龙兴刚[1] 谢小赋[2] 庞飞[2] 叶晓[2] 

机构地区：[1]海军计算技术研究所,北京100841 [2]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《信息安全与通信保密》2015年第10期123-126,130,共5页Information Security and Communications Privacy

摘　　要：本文针对TCG可信计算规范中X86架构的可信计算平台存在被动可信度量、操作系统安全增强机制不完备和认证体制复杂等问题,提出一种基于国产处理器和国产操作系统的自主可控可信计算平台解决方案,设计了国产操作系统可信安全增强策略和框架,给出了基于可信平台控制模块的主动可信度量和基于身份标识平台身份认证等关键技术实现途径。Aiming at passive trusted measurement, incomplete operation system security enhancement mechanism and complicated authentication mechanism, X86-based trusted computing platform in TCG trusted computing sepcifications, an independent controlla- ble scheme of trusted computing platform based on domestic processors and operating systems is proposed. Trusted security enhance- ment strategy and frame of domestic operating system is designed, and implementations of some key technologies, such as active trus- ted measurement based on control module of trusted platform and identity authentication based on identity platform are described in this paper.

关 键 词：可信计算 主动度量 主可控 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]