基于TPM的安全操作系统的设计研究

Study on Design of Security Operating System Based on TPM

目前操作系统正面临着各种各样的攻击,如何设计安全的操作系统对计算机的广泛应用有重要的作用。可信计算组织（Trusted Computing Group,TCG）提出了可信计算规范,其主要思想就是通过度量和验证来保证平台及应用的安全。结合TCG规范中＂可信链＂的思想,利用可信平台模块（trusted platformmodule,TPM）提供的可信计算功能,给出了基于TPM的安全操作系统的体系结构,进行了基于TPM的安全操作系统的启动设计和应用安全设计,可较好地解决目前操作系统面临的安全问题。

Currently, operating system is facing a variety of attacks, how to design safe operating system is important to widely use the computer. Trusted Computing Group（TCG） releases the trusted computing specification. Its main idea is to ensure the safety of platforms and applications by the measurement and verification. Combined with ＂credible chain＂ idea of TCG criterion, and made use of trusted computing functionality provided by trusted platform module（TPM）, the paper firstly designs the architecture of security operating system based on TPM, then the booting design and application security design of security operating system is carried out. This can solve the security problem of current operating system In a certain extent.