基于可逆向扩展的可信数据封装存储方案

Trusted computing sealing scheme based on reverse extending

针对封装存储在应用层多任务环境下不能实现异步封装解封操作,提出了一种改进的可信数据封装存储方案,在可信密码模块(TCM)中引入了一个新的寄存器PCR_R,利用可逆向的度量值扩展方案保证平台应用层状态一致,同时利用可信报告根(RTR)和存储度量日志(SML)提供的实时可信状态证明,在应用层多任务环境下实现了异步封装解封操作。

Data sealing can not achieve asynchronous sealing and unsealing operation in application layer multitasking environment. To overcome this problem, we propose an improved sealing approach for trusted computing, in which a new register PCR_R is introduced into TCM. It uses the metrics reversible extending scheme to guarantee the state of platform in application layer unanimous. The improved sealing approach also uses the real-time validation of trusting state provided by Root of Trust for Reporting （RTR） and Stored Measurement Log （SML） to solve the asynchronous sealing and unsealing operation in application layer multitasking environment.