基于权利义务模型的可信计算环境实现

Implementation of Trusted Computing Environment Based on Rights and Obligations Model

针对目前对信任的定义和模型尚未建立通用表达的问题,利用计算机及网络平台的通用性,提出一个可信计算平台模型。通过把现有的计算平台分层逻辑化为不同的信任层,降低可信计算平台模型实施的难度,提高其灵活性、扩展性和效率,在客户端系统的引导阶段构建完整的可信链,以保证可信计算平台的安全性。原型系统的实现结果表明,系统中所有的计算机及其网络构成统一的可信计算平台,使信任的传递从用户到用户,实现用户间的可信计算。

Aiming at the problem that the definition and model of trust have no common representations currently,this paper presents a trusted computing platform model by using the versatility of computer and network platform.By putting the existing computing layered platform into different logical trust layers,it reduces the difficulty of implementing trusted computing platform models,and improves flexibility,scalability and efficiency of the models.A complete trusted chain is established in start phase of the client system to ensure the security of the platform.Implementation results of the prototype system show that all the computers and their networks in the system constitute a unified platform for trusted computing,which makes the transfer of trust from the user to the user and realizes trusted computing between users.