基于可信平台控制模块的信任评估系统研究  

Study on Trust Evaluation System Based on Trusted Platform Control Module

作　　者：黄坚会 张江江 沈昌祥 张建标 王亮 HUANG Jianhui;ZHANG Jiangjiang;SHEN Changxiang;ZHANG Jianbiao;WANG liang(Faculty of Information Technology,Beijing University of Technology,Beijing 100124,China;Beijing Key Laboratory of Tusted Computing,Beijing 100124,China;Shanghai Suanshi Technology CO.,LTD,Shanghai 201203,China)

机构地区：[1]北京工业大学信息学部,北京100124 [2]可信计算北京市重点实验室,北京100124 [3]上海算石科技有限公司,上海201203

出　　处：《计算机科学》2024年第S02期964-969,共6页Computer Science

基　　金：北京市自然科学基金(M21039)。

摘　　要：现有的可信评估都是基于计算机软件扫描或可信模块通过本机报告或网络远程证明来实现的,这提供了本机执行环境构建过程及运行态的可信度量保障,但从网络应用角度来看,还存在着系统性的安全风险。文中提出一种在可信平台控制模块(TPCM)内部增加实现的网络节点信任评估方法来解决这个问题。该方法在双体系架构(计算+防御)下通过防御单元的TPCM来实现快速可靠的信任评估系统,评估后的可信值通过TPCM进行存储和维护。该方案既避免设备受攻击后的伪造,又释放了CPU的计算资源。通过研究基于TPCM支撑的网络节点信任评估系统,实现了轻量级计算机网络平台节点可信性的系统性评估,保障了网络的安全可信运行。The existing trust assessment is based on computer software scanning or trust modules that are achieved through local reporting or remote network authentication,which solves the trust measurement guarantee for the construction process and running status of the local execution environment.However,from the perspective of network applications,there are still systemic security risks.This paper proposes a network node trust evaluation method that adds implementation within the trusted platform control module(TPCM)to address this issue.This method achieves a fast and reliable trust evaluation system under a dual architecture(computing+defense)through the TPCM of defense units,and the evaluated trust values are stored and maintained through TPCM.This scheme not only avoids device forgery after being attacked,but also frees up CPU computing resources.This paper studies a network node trust evaluation system based on TPCM support to achieve a systematic evaluation of the cre-dibility of lightweight computer network platform nodes,ensuring the safe and reliable operation of the network.

关 键 词：可信平台控制模块 信任评估 安全可信 动态度量 可信计算3.0 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]