基于跨设备信任链的无人机系统可信启动方案  

A Trusted Boot Scheme for UAS Based on Cross-device Chain of Trust

作　　者：蹇奇芮 陈泽茂 武晓康 JIAN Qirui;CHEN Zemao;WU Xiaokang(Key Laboratory of Aerospace Information Security and Trusted Computing,Ministry of Education,School of Cyber Science and Engineering,Wuhan University,Wuhan 430072;College of Electric Engineering,Naval University of Engineering,Wuhan 430034)

机构地区：[1]武汉大学国家网络安全学院空天信息安全与可信计算教育部重点实验室,武汉430072 [2]海军工程大学电气工程学院,武汉430034

出　　处：《计算机与数字工程》2024年第7期2101-2107,共7页Computer & Digital Engineering

摘　　要：为了保护无人机系统软件的秘密性和完整性,提出了一种基于跨设备信任链的无人机系统可信启动方案。该方案针对无人机和地面站设备的运行环境特点,将无人机设备的可信根分离为秘密性保护和完整性保护两部分,分别存放到无人机和地面站设备中,通过启动时两设备交互校验完成跨设备可信启动,保证系统安全性;通过对系统软件进行多重签名,避免开发商或者用户单方面篡改系统。实验结果表明,该方案能够满足无人机系统软件秘密性和完整性保护需求。In order to protect the secrecy and integrity of UAV software,a trusted boot scheme for UAS based on cross-device chain of trust is proposed.According to operation environment of the UAV and the ground station,the root of trust in the UAV is di⁃vided into two parts,which are confidentiality protection part and integrity protection part,which are stored in the UAV and the ground station separately.During startup,the two devices finished cross-device trusted boot through interactive verification to en⁃sure system security.By performing multiple signatures on the system software,manufacturers or users are prevented from unilateral⁃ly tampering with the system.The experiment shows that the scheme can meet the requirements for software secrecy and integrity in the UAS.

关 键 词：无人机系统 可信计算 信任链 系统安全 软件保护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]