基于可信计算的跨网数据安全交换技术  

Data exchange technology across networks based on trusted computing

作　　者：李超[1] 韩翔 刘钊[2] 赵利[1] LI Chao;HAN Xiang;LIU Zhao;ZHAO Li(Information Security Department,First Research Institute of Ministry of Public Security of People’s Republic of China,Beijing 100048,China;School of Information Network Security,People’s Public Security University of China,Beijing 100038,China)

机构地区：[1]公安部第一研究所信息安全部,北京100048 [2]中国人民公安大学信息网络安全学院,北京100038

出　　处：《计算机工程与设计》2021年第10期2762-2769,共8页Computer Engineering and Design

基　　金：国家重点研发计划基金项目(2018YFC0809800)。

摘　　要：为解决不同网络之间数据安全交换的问题,提出一种基于可信计算的跨网数据安全交换技术。分析现有数据交换方式在保护数据安全传输方面的不足,提出一种采用可信计算对系统进程、系统数据资源进行加固防护的方案。对跨网数据交换方案设计的过程进行认知和分解,基于国产化平台进行设计和实现。设计对数据文件、应用程序的保护方法和数据交换行为的审计措施,通过测试验证了该方法的可行性,验证了在跨网数据交换过程中对数据安全性保护的有效性。To solve the problem of data security exchange between different networks,a cross-network data security exchange technology based on trusted computing was proposed.The shortcomings of the existing data exchange methods were analyzed in protecting the safe transmission of data,and a scheme of using trusted computing to strengthen the protection of system processes and system data resources was proposed.The design process of cross network data exchange scheme was recognized and decomposed,and it was designed and implemented based on the domestic platform.Data file,application protection method and data exchange behavior audit measures were designed.The feasibility of the method was verified through tests,and the effectiveness of the method for data security protection in the process of cross-network data exchange was also verified.

关 键 词：可信计算 跨网络 数据交换 数据文件保护 应用程序保护 可信加固硬件 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]