可信密码模块设计方法技术研究

Research on Design Method and Technology of Trusted Cryptographic Module

随着信息技术的迅速发展,信息的真实性、隐私性和安全性越来越受到公众的重视。可信计算技术是解决上述问题的有效手段,可信密码模块作为可信计算技术商业应用的产品在国内已被大量应用。可信密码模块由命令解析引擎、计算引擎和认证管理区域模块等组成。针对命令引擎和计算引擎模块的设计,提出了基于模板和密码中间件的通用化设计方法,以解决传统设计方法的开发效率不高、灵活性不足和扩展性不够的问题。

With the rapid development of information technology,the authenticity,privacy and security of information are paid more and more attention by public.Trusted computing technology is an effective means to solve the above problems,and trusted cryptographic modules have been widely used in China as a commercial product of trusted computing technology.The trusted cryptographic module consists of command parsing engine,computing engine and authentication management area module.Aiming at the design of command engine and computing engine mod-ules,a generalized design method based on templates and cryptographic middleware is proposed to solve the prob-lems of low development efficiency,insufficient flexibility and insufficient extensibility of traditional design methods.