基于通用准则的可信计算支撑软件设计方法  

A Design Method of Trusted Computing Supporting Software Based on Common Criteria

作　　者：何凡[1] 冷静[2] HE Fan;LENG Jing(School of Computer Science and Technology,Wuhan University of Technology,Wuhan 430070,China;Department of Information Technology,Hubei University of Police,Wuhan 430034,China)

机构地区：[1]武汉理工大学计算机科学与技术学院,湖北武汉430070 [2]湖北警官学院信息技术系,湖北武汉430034

出　　处：《郑州大学学报（理学版）》2018年第2期18-22,共5页Journal of Zhengzhou University:Natural Science Edition

基　　金：国家自然科学基金项目(61272452);湖北省教育厅科学技术研究计划指导性项目(B2016257);湖北省公安厅自主科研项目(hbst2014yycx04);湖北省警官学院重点科研项目(2015ZD006)

摘　　要：现有的可信计算支撑软件的规范只定义了软件的功能接口,对其要达到的安全功能需求没有明确的描述,这使得可信计算支撑软件的分析和设计没有明确的安全目标.针对这一问题,结合通用准则CC的思想,提出一种可信计算支撑软件的设计方法,通过分析可信计算支撑软件的安全功能需求,并按照功能类、功能族和组件的层次对其安全功能进行了划分,确定功能组件间的依赖关系,完成了可信计算支撑软件原型的设计,能实现密码支持和完整性保护等安全目标.实验结果表明,该软件支持TPM2.0的接口调用,并能够对中国密码算法SM4提供调用支持.The existing specifications of trusted computing supporting software(TCSS)only defined the functional interface of software,but failed to provide explicit description of the security functional requirements of the TCSS.The analysis and design of TCSS lacked definite security target.To solve this problem,a design method of TCSS based on the idea of common criteria(CC)was proposed.The security functional requirements of TCSS were analyzed.And its security function according to the function class,function family and component level were divided.At last,the prototype of TCSS was implemented,and the security targets of cryptographic support and integrity protection were achieved.The experimental results showed that the proposed software prototype could support the interface call of the TPM 2.0 and the SM4 cipher algorithm of China.

关 键 词：通用准则 可信计算平台 可信计算支撑软件 可信平台模块 安全功能 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]