适于双冗余系统的信任链生成和更新算法

Trust chain generating and updating algorithm for dual redundancy system

可信计算技术中传统的信任链构建方式只适用于单一系统,对于工业控制领域广泛采用的双冗余系统会造成信任传递的断裂,为此提出一种适于双冗余系统的信任链模型,通过双信任链设计以及IMC/IMV交互机制,实现信任链从一个计算单元到另一个计算单元的扩展。在此基础上,提出了双冗余系统信任链生成和更新算法。最后基于可信理论和实验分析,对所提出模型的有效性进行证明。

In trusted computing field, the traditional construction mode of trust chain is only applicable to a single system. For the dual redundancy system, it causes break of transitive trust. A trust model suitable for dual redundancy system was proposed. Through double trust chain design and IMC/IMV interaction mechanism, the trust chain extension of trust from a computing unit to another unit was realized. On this basis, a trust chain generating and update algorithm for dual re- dundancy system was proposed. Finally, the validity of the proposed model was proved based on the trusting theory.