基于机载嵌入式可信计算平台的安全配置管理系统  

Security Configuration Management System Based on Airborne Embedded Trusted Computing Platform

作　　者：杨子怡 李亚晖[1] 王中华 王斌[1] 刘镡稚 何旺宇 YANG Zi-yi;LI Ya-hui;WANG Zhong-hua;WANG Bin;LIU Xin-zhi;HE Wang-yu(Xi′an Aeronautics Computing Technique Research Institute,AVIC,Xi′an 710000,China)

机构地区：[1]航空工业西安航空计算技术研究所,陕西西安710000

出　　处：《航空计算技术》2023年第2期123-126,共4页Aeronautical Computing Technique

基　　金：军科委国防创新特区项目资助(20-163-01-ZT-004-102-01)。

摘　　要：机载嵌入式计算机作为航空领域技术含量极高的关键单元,占有极为重要的地位。为了提升机载嵌入式计算机的安全防护能力,在将可信计算平台引入到机载计算机的基础上,设计并实现了基于机载嵌入式可信计算平台的安全配置管理系统,达到对机载嵌入式可信计算机中的背书密钥、背书证书、安全策略信息、设备信息、应用证书、可信日志进行配置管理的目的,可用于解决目前飞机在维护过程中效率低、对维护人员要求高、容易引入安全威胁等问题。As a key unit with highly technical content in aviation,airborne embedded computer plays an extremely important role.To enhance the security protection of airborne embedded computer ability,on the basis of introducing the trusted computing platform into the on board computer,this paper was designed and implemented a security configuration management system based on airborne embedded trusted computing platform,achieving the configuration and management of the endorsement keys,the endorsement certificate,the security policy information,the device information,the application certificate and the credible log in airborne embedded trusted computers.And this paper can be used to solve problems during aircraft maintenance process,such as low efficiency,high requirements on maintenance personnel,and easy introduction of security threats.

关 键 词：可信计算平台 机载计算机 安全配置管理 

分 类 号：V247.1[航空宇航科学与技术—飞行器设计]