一种无需操作系统的硬件级可信度量方法  

A hardware-level trust measurement approach without operating system

作　　者：张帆[1,2] 张聪[1] 陈伟[3] 徐明迪[4] 

机构地区：[1]武汉轻工大学数学与计算机学院,湖北武汉430023 [2]杭州电子科技大学通信工程学院,浙江杭州310018 [3]南京邮电大学计算机学院,江苏南京210046 [4]武汉数字工程研究所系统软件部,湖北武汉430072

出　　处：《华中科技大学学报（自然科学版）》2014年第11期6-10,共5页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(61202353;61272278;61350001);武汉轻工大学引进(培养)人才科研启动资金资助项目(2014RZ01);浙江省教育厅资助项目(Y201224055);国防预研基金资助项目(9140A15040211CB3901)

摘　　要：针对云计算等新型计算环境下的可信度量问题,提出了一种无需操作系统的硬件级全盘任意文件可信度量方法.通过在U-key中放置可信度量代理(TMA),利用TMA自主解析文件系统获取磁盘中任意文件的扇区存储地址,从而能够在不存在Grub、未启动操作系统以及不需要其他任何硬软件支持的情况下,实现对全盘任意文件的可信度量.考虑到TMA的安全性,利用B方法实现了对TMA的形式化开发.与已有的工作相比,所提方法不仅能够应用在云计算等新型计算环境中,而且能够应用于不存在可信平台模块(TPM)等安全增强芯片的普通计算机上.实验证明了本方法是有效的.Regarding the trust measurement problem in the new types of computing environments such as cloud computing and so on ,a hardware-level trust measurement approach without operating system was presented .By placing TMA (trust measurement agent) in a U-key ,and using TMA to automati-cally analyze file-system ,any file in a hard disk could be measured without the assistants of operating system and any other hardware and software .The TMA was developed based on the B method due to the consideration of TMA security .Comparing against existing works ,this approach can be applied not only in the new types of computing environments such as cloud computing and so on ,but also in common PCs (personal computers) that has no security chips such as TPM (trusted platform mod-ule) .Experimental results show that this approach is efficient .

关 键 词：可信度量 可信计算 可信链 操作系统 U-key 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]