摘要
对UEFI BIOS典型的实现-Tiano系统进行了分阶段剖析,针对其所存在的安全缺陷及不足,结合可信计算的技术和思想,提出了可信Tiano这一新概念。介绍了可信Tiano系统的总体设计和工作流程,并对可信Tiano系统关键技术做详细研究,包括信任根的实现机制、可信度量组件和EFI映像签名,最后给出可信Tiano系统与标准Tiano系统的对比分析。通过分析容易看出,改进后的Tiano系统能较好地满足新一代BIOS在可信及安全方面的需求。
Security defects and insufficiency of current Tiano are pointed out by analysis the typical realization of UEFI BIOS, a new concept of trusted Tiano combined with trusted computing technology and idea is introduced. First the overall design and workflow of the system is introduced. Key technology research of the system is presented as well including the realization mechanism of the root of trust, trust measurement components and EFI signature image. Finally, comparative analysis is given between trust Tiano and standard Tiano. It is easy to see that this design can meet the needs of trusted and security of a new generation BIOS.
出处
《计算机工程与设计》
CSCD
北大核心
2009年第11期2645-2648,共4页
Computer Engineering and Design
