一种可重构的可信密码模块模拟器实现方法  

A Realization Method of Reconfigurable Trusted Cryptography Module Emulator

作　　者：孟思琦 胡俊[1] 马亮 MENG Siqi;HU Jun;MA Liang(School of Computer Science,Beijing University of Technology,Beijing 100124,China;Shandong TCCA Information Technology Research Institute,Jinan 250098,Shandong,China)

机构地区：[1]北京工业大学计算机学院,北京100124 [2]山东可信云信息技术研究院,山东济南250098

出　　处：《武汉大学学报（理学版）》2022年第1期44-50,共7页Journal of Wuhan University:Natural Science Edition

基　　金：国家重点研发计划项目(2020YFB2009501)。

摘　　要：可信密码模块是可信计算平台的信任源头。为可信密码模块开发模拟器对于可信计算教学、开发测试、工程验证都有重要意义。针对可信密码模块模拟器存在仅适用于特定标准、应用场景较为固定且不重视功能拓展的问题,本文提出了一种以模块化、软件定义数据结构的方式实现可重构可信密码模块模拟器的方法,并基于该方法实现了基于Cube可信软件基框架的可信密码模块模拟器,通过对该模拟器重构实现对不同接口的兼容、对象监控功能以及虚拟可信密码模块场景的支持。本文提出的方法可以灵活地构建不同类型的模拟器,并为按需改造模拟器提供了便利。模拟器重构工作验证了本文的方法是可行的,且具有可重用、易拓展、易操作等优势。The trusted cryptography module is the source of trust for the trusted computing platform.The development of emulators for trusted cryptography module is of great significance for trusted computing teaching,development and testing,and engineering verification.Aiming at the problem that the trusted cryptography module emulator is only applicable to specific standards,the application scenarios are relatively fixed and does not pay attention to the expansion of functions,this paper proposes a method to implement a reconfigurable trusted cryptography module emulator in a modular,software-defined data structure manner.This method can flexibly construct different types of emulator and provide convenience for the on-demand modification of emulators.This paper uses this method to implement a trusted cryptography module emulator based on the Cube,and realizes the compatibility of different interfaces,object monitoring functions,and virtual trusted cryptography module scenarios through reconfiguration of the emulator.These reconfiguration work verifies that the scheme is feasible and has the advantages of reusability,easy expansion and easy operation.

关 键 词：可信计算 可信密码模块 模拟器 可重构 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]