基于Linux系统的嵌入式终端可信安全方案  

Trusted security solution based on Linux system for embedded terminals

作　　者：李俊彦 董增寿[1] LI Junyan;DONG Zengshou(School of Electronic Information Engineering,Taiyuan University of Science and Technology,Taiyuan 030024,China)

机构地区：[1]太原科技大学电子信息工程学院,山西太原030024

出　　处：《现代电子技术》2018年第18期67-71,共5页Modern Electronics Technique

基　　金：山西省青年科技研究基金项目(201601D021065);太原科技大学校博士科研启动项目(20152022);晋城市科技计划项目(201501004-4)~~

摘　　要：针对嵌入式平台的安全问题,提出一种基于Linux系统的嵌入式终端可信安全方案。可信计算的协议层和应用层不涉及硬件部分,因此首先设计一种可信计算仿真试验环境,接着采用Atmel公司的可信平台模块(TPM),将其可移动的启动存储介质作为核心可信度量根,简化并移植PC平台上的可信软件协议栈(TSS),从而实现了嵌入式终端可信环境的建立。实验结果表明,在ARM平台上可以实现可信启动,建立可信环境,因此可基本上保证终端的安全性。In allusion to the safety problem of the embedded platform,a trusted security solution based on Linux system is proposed for embedded terminals.As the hardware part is not involved in the protocol layer and application layer of trusted com-puting,a simulation test environment is designed for trusted computing.The trusted platform module(TPM)of Atmel Corporation is adopted,its removable startup storage medium is taken as the core root of trust measurement,and the TCG software stack(TSS)is simplified and transplanted on the PC platform,so as to realize establishment of trusted environment for embedded ter-minals.The experimental results show that the trusted startup can be implemented on the ARM platform,and the trusted envi-ronment can be built,which can basically guarantee the security of terminals.

关 键 词：可信计算 嵌入式终端 可信平台模块 AT97SC3205T 安全方案 LINUX 

分 类 号：TN915.08-34[电子电信—通信与信息系统] TP309[电子电信—信息与通信工程]