分层可信计算平台模型的研究与实现

Layered trusted computing platform model and its implementation

提出了一种基于现有计算机网络的可信计算平台模型。该模型充分利用了现有的计算机及其网络平台的通用性,将现有的计算平台分层逻辑化为不同的信任层,不仅降低了可信计算平台模型实施的难度,而且提高了其灵活性、扩展性和效率;同时该模型从客户端系统的引导阶段出发构建完整的可信链,保证了可信计算平台的安全性;此外该模型解决了现有的可信计算平台的方向性和系统输入未知性的问题。原型系统实现的结果表明,由于系统中所有计算机及其网络构成统一的可信计算平台,使信任的传递从用户到用户,进而实现真正的对于用户体验的可信计算。

This paper presented a trusted computing platform model based on existing computer network, Which made full use of existing computer network platform and its versatility, through putting the existing computing layered platforms into different logical trust layer, not only reduced the difficulty of the implementation to the trusted computing platform models but also im- proved its flexibility, scalability and efficiency. At the same time, the model built the credibility of a complete chain based on the starting phase to the client system, thereby ensured the trusted computing platform security. In addition, the model figured out the issues of the system directional and it＇ s inputting unknown on the existing trusted computing platform. The results of the implementation to the prototype system show that, in the system, all the computers and their networks constitute a unified platform for trusted computing, make the transfer of trust from the user to the user come true, and then realize the true user experience for the trusted computing.