基于可信处理器芯片的服务器可信框架  

Server Trusted Framework Based on Trusted CPU Chip

作　　者：修桂林 张博为 刘凡 罗奥[1] XIU Guilin;ZHANG Bowei;LIU Fan;LUO Ao(Institute of Microelectronics,Tsinghua University,Beijing 10084,China;Montage Technology,Shanghai 200233,China)

机构地区：[1]清华大学微电子学研究所,北京10084 [2]澜起科技股份有限公司,上海200233

出　　处：《广西师范大学学报（自然科学版）》2020年第2期43-50,共8页Journal of Guangxi Normal University:Natural Science Edition

基　　金：国家科技重大专项(2018ZX01028201);国家自然科学基金(61672317,61834002);国家科技攻关计划(2018YFB2202101)。

摘　　要：服务器是信息系统、云数据存储和处理的重要工具,中央处理器是服务器的核心。当前处理器芯片电路规模庞大、生产流程复杂,且处理器的设计、封装和制造都严重依赖国外技术和厂家。保证处理器芯片及服务器的安全可信是涉及到网络安全、信息安全乃至国家安全的重要课题。迄今为止,处理器芯片硬件行为的可信研究尚未得到足够的关注。本文首先给出了"可信处理器芯片"的概念,梳理近年来处理器芯片面临的安全风险;在此基础上,提出了基于清华大学DSC技术的可信处理器芯片实现原理及其服务器软硬件可信框架;最后,探讨在当前安全形势下可信处理器芯片及其服务器可信框架的意义和高安全需求下的扩展应用价值。The server is a fundamental facility for today’s information systems, cloud data storage and processing. CPU is the core element of the server. The current CPU circuit is extremely large in scale and complicated in production process, and its design, packaging and manufacturing are heavily dependent on foreign technologies and manufacturers. How to ensure the security and credibility of the processor chip is a key to network security and information security. But till today, credible research on the hardware behavior trustworthiness of CPU chip has not aroused sufficient attention. This paper first gives the concept of "trusted CPU chip", combing the security risks faced by CPU chips in recent years. On this basis, the implementation principle of trusted CPU chip based on Tsinghua University DSC technology and its server trusted framework are proposed. Finally, this paper explores the significance of the trusted CPU chip and its server trusted framework in the current hardware security scenarios and the extended applications in covering high security requirements.

关 键 词：服务器 处理器 DSC技术 硬件安全 可信框架 

分 类 号：TP332[自动化与计算机技术—计算机系统结构]