机载嵌入式计算机多级安全防护体系架构研究  

Architecture Research on Multi-level Security on Airborne Embedded Computer

作　　者：王中华 李亚晖[1,2] 何旺宇 高沙沙 WANG Zhong-hua;LI Ya-hui;HE Wang-yu;GAO Sha-sha(Xi′an Aeronautics Computing Technique Research Institute,AVIC,Xi′an 710068,China;Aviation Key Laboratory of Science and Technology on Airborne and Missileborne Computer,Xi′an 710065,China;School of Computer Science and Technology,Xidian University,Xi′an 710071,China)

机构地区：[1]航空工业西安航空计算技术研究所,陕西西安710068 [2]机载弹载计算机航空科技重点实验室,陕西西安710065 [3]西安电子科技大学计算机科学与技术学院,陕西西安710071

出　　处：《航空计算技术》2020年第3期91-95,共5页Aeronautical Computing Technique

基　　金：装备发展预研项目资助(31511020202)。

摘　　要：在体系化作战模式下,机载嵌入式计算机内部所有计算节点均面临底层硬件环境、平台运行系统、上层作战任务等各类安全威胁。同时,由于上层不同安全等级的作战任务在进行协同作战时会存在信息交互需求,这就会产生跨节点的多安全等级信息安全交互、隔离以及访问控制等问题。为了解决上述安全威胁,利用可信计算技术构建物理安全基础,以MILS架构作为软件运行环境框架,提出和设计机载嵌入式计算机多级安全防护体系架构,并对关键功能模块进行描述。With the background of System Combat,there are all kinds of threats on the airborne embedded computer,such as hardware,operating system,operational task,etc.Meanwhile,during the process of data communication between different operational tasks,as the security level of all of the tasks is not same,it will leads to the problems of secure communication,isolation and access control of multi-level information for cross-node.As a result,to solve the above described problems,hardware physical security of devices is achieved in this paper based on trusted computing.After that,with the software running environment constructed based on the MILS architecture,the architecture design of multi-level security airborne embedded computer is proposed.Lastly,the vivid descriptions of some key functional modules are given.

关 键 词：嵌入式计算机 多级安全 可信计算 MILS 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]