一种基于智能卡的可信监视器程序实现方法

Implementation Method of Trusted Monitor Program Based on Smart Card

智能卡的安全机制存在篡改存储数据或代码、拒绝服务攻击、重新编程等安全问题,其根源在于卡的合法应用环境发生了改变、正常应用操作序列发生了错乱或模仿。针对上述问题,结合智能卡应用与可信计算技术,提出一种对智能卡计算环境可信和行为可信的验证方法。通过智能卡COS的开发实现该可信增强的技术。该方法可提高金融卡应用的可信度。

The security mechanism of smart card can not dissolve some problems such as tampering the data or code, DoS attacks and re-programming. These problems are mainly caused by destruction of the card＇s application circumstance, by confusion or simulation of the operating sequence. By combinating of trusted computing technology and application of smart card, a method to verify the trustiness of the circumstance and actions on the card is present. The implementation for the method is introduced by the development of a kind of chip operating system on smart card, from which the trustworthiness of the financial card is enhanced effectively.