可信计算的操作系统安全模型及实现方案

Realization Proposal and Security Model of Operating System Based on Credible Computation

对可信计算平台的安全要素进行分析,深入研究了一种采用可信计算的原理进行操作系统运行中核心信息的完整性保护策略,以Windows Vista操作系统为例,阐述该操作系统对数据的完整性保护策略和可信环境的建立框架。根据可信操作系统中,数据完整性保护策略以基于根信任的安全机制和信任传递机制,从而建立一套完整的信息完整性保护系统。在此基础上,提出并实现了一个新型基于可信计算的操作系统信息完整性保护模型,并阐述了该模型的实现原理、组成结构和工作过程。

Through analysis security essential factor of the credible computation platform,this paper has researched one kind of information integrity protection strategy deeply which has used the credible computation principle for operating system running core information.Take the Windows Vista operating system as the example,elaborated the data integrity protection strategy and the credible environment establishment frame in this operating system in details.In credible operating system,data integrity protection strategy designed based on the root trust safety mechanism and trust transmission mechanism,and then established a set of complete information integrity protective system.Based on this,this paper has proposed and realized one new type operating system information integrity protection model based on the credible computation.Elaborated in detail this model realizes the principle,the composition structure and the work process.