基于VTCM的分布式可信度量方法  

Distributed Trusted Measurement Method Based on VTCM

作　　者：何旺宇 王中华 李亚晖 HE Wangyu;WANG Zhonghua;LI Yahui(Xi’an Aeronautics Computing Technique Research Institute,Aviation Industry Corporation of China,Xi’an 710065,China;Key Laboratory of Aviation Science and Technology on Airborne and Missile-borne Computer,Xi’an 710068,China)

机构地区：[1]中国航空工业集团公司西安航空计算技术研究所,西安710065 [2]机载弹载计算机航空科技重点实验室,西安710068

出　　处：《计算机工程》2020年第8期223-227,234,共6页Computer Engineering

基　　金：国家部委基金。

摘　　要：为实现多台协同工作的嵌入式计算机安全启动,需在每台计算机内嵌入可信计算模块,但会给资源受限的嵌入式系统带来较大的能耗与管理开销。为此,提出一种结合可信密码模块(TCM)和虚拟可信密码模块(VTCM)的分布式可信度量方法。将已安装TCM模块的嵌入式计算机作为可信基础,在其他计算机上运行VTCM与TCM模块验证配置信息以完成分布式可信度量,从而实现工作域内可信扩展。实验结果表明,该方法满足嵌入式计算机可信启动过程中的机密性和完整性要求,在嵌入式环境下具有安全并行启动的可行性。In order to realize the safe start-up of multiple cooperative embedded computers,it is necessary to embed trusted computing module in each computer,but this will bring large energy consumption and management overhead to resource-constrained embedded system.To address the problem,this paper proposes a distributed trusted measurement method combining Trusted Cryptography Module(TCM)and Virtual Trusted Cryptography Module(VTCM).The embedded computer with TCM module installed is used as the trusted base,and the VTCM and TCM module are run on other computers to verify the configuration information to complete the distributed trusted measurement,so as to realize the trusted extension in the work domain.Experimental results show that the method meets the requirements of confidentiality and integrity in the trusted start-up process of embedded computer,and has the feasibility of secure parallel start-up in embedded environment.

关 键 词：可信计算 嵌入式计算机 可信密码模块 虚拟可信密码模块 分布式可信度量 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]