基于加密SD卡的内网移动终端可信接入方案  

Trusted access scheme for intranet mobile terminal based on encrypted SD card

作　　者：李济洋 赵鹏远 刘喆[1,2] LI Jiyang;ZHAO Pengyuan;LIU Zhe(School of Cyber Science and Engineering, Wuhan University, Wuhan 430072, China;Key Laboratory of Aerospace Information Security & Trusted Computing, Ministry of Education, Wuhan University, Wuhan 430072, China;School of Cyber Science and Engineering, Hebei University, Baoding 071002, China)

机构地区：[1]武汉大学国家网络安全学院,湖北武汉430072 [2]武汉大学空天信息安全与可信计算教育部重点实验室,湖北武汉430072 [3]河北大学网络空间安全与计算机学院,河北保定071002

出　　处：《网络与信息安全学报》2019年第4期108-118,共11页Chinese Journal of Network and Information Security

基　　金：国家高技术研究发展计划（“863”计划）基金资助项目(No.2015AA016002)~~

摘　　要：为了解决因不可信移动终端非法接入内网导致的信息安全问题,设计了一种基于加密SD卡的内网移动终端可信接入方案。通过可信计算技术,以加密SD卡作为可信硬件设备实现了移动终端设备的可信启动、完整性验证与内网可信接入,并对接入后移动终端与内网的数据交互过程提供了一种加密通信安全存储机制。实验结果表明,该方案在不改变移动终端基本架构的前提下,较为高效地对移动终端进行安全性认证,并在一定程度上保护内网环境的安全。In order to solve the problem of information security caused by illegal access of untrusted mobile terminals to intranet, a trusted access scheme for intranet mobile terminals based on encrypted SD card is designed. By using encrypted SD card as trusted hardware equipment, trusted start-up, integrity verification and Intranet trusted access of mobile terminal devices are realized. A secure storage and encrypted communication mechanism for data interaction between mobile terminal and Intranet is also created. The experimental results show that the scheme can effectively authenticate the security of mobile terminals without changing the basic architecture of mobile terminals, and to some extent protect the security of the Intranet environment.

关 键 词：移动终端 可信计算 加密SD卡 完整性度量 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]