基于Ukey和LiveOS的加密硬盘安全认证方案  

A Secure Authentication Scheme for the Full-encrypted Drives Based on Ukey and LiveOS

作　　者：徐欣[1] 陈锦飞[1] 

机构地区：[1]杭州电子科技大学通信工程学院,浙江杭州310018

出　　处：《杭州电子科技大学学报（自然科学版）》2016年第6期15-20,共6页Journal of Hangzhou Dianzi University：Natural Sciences

摘　　要：针对目前硬盘加密方案通用性较差以及身份认证过程安全性不够的问题,提出一种全加密固态硬盘安全认证和可信启动方案.利用商密Ukey实现秘钥的安全存储,利用定制精简的LiveOS系统实现Ukey和加密硬盘的安全配对、认证、秘钥传递以及硬盘系统的可信启动.最后提出了一种秘钥安全恢复方案.方案基于现有安全ASIC芯片构建,并在通用PC系统上验证通过,具有很好的通用性、安全性及易用性.Aiming at the truth that the present disk encrypting schemes have poor versatility and are not secure enough in identity authentication,this paper proposes a secure authentication and trusted boot scheme for the full-encrypted drives(FED).We use Ukey for storing secret key and the custommade simplified LiveOS for secure pairing,authentication,private key passing and trusted boot for system in the disk.Finally we propose a secure scheme for restoring secret key.The whole scheme is based on the current secure ASIC and is implemented on the general PC system,which has good versatility,security and usability.

关 键 词：加密硬盘 身份认证 可信启动 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]