适于双冗余系统的信任链生成和更新算法

doi:10.11959/j.issn.1000-436x.2017001

Abstract

Abstract:

In trusted computing field,the traditional construction mode of trust chain is only applicable to a single system.For the dual redundancy system,it causes break of transitive trust.A trust model suitable for dual redundancy system was proposed.Through double trust chain design and IMC/IMV interaction mechanism,the trust chain extension of trust from a computing unit to another unit was realized.On this basis,a trust chain generating and update algorithm for dual redundancy system was proposed.Finally,the validity of the proposed model was proved based on the trusting theory.

Key words: trusted computing, industrial control computer, dual redundancy system, trust chain, IMC/IMV

CLC Number:

TP319

Lei WANG,Ming-hua YANG,Zeng-liang LIU,Jian-qun ZHENG. Trust chain generating and updating algorithm for dual redundancy system[J]. Journal on Communications, 2017, 38(1): 1-8.

Figures/Tables 7

References 16

[1]	冯登国 . 可信计算——理论与实践[M]. 北京: 清华大学出版社, 2013.
	FENG D G . Trusted computing theory and practice[M]. Beijing: Tsinghua University PressPress, 2013.
[2]	SHEN C X , ZHANG H G , WANG H M ,et al. Research on trusted computing and its development[J]. Science China:Information Sciences, 2010,53(3): 405-433.
[3]	沈昌祥, 张焕国, 王怀民 ,等. 可信计算的研究与发展[J]. 中国科学, 2010,40(40): 139-166.
	SHEN C X , ZHANG H G , WANG H M ,et al. Research and development of trusted computing[J]. Science China, 2010,40(40): 139-166.
[4]	TCG. TPM specifications v2.0[EB/OL]. .
[5]	LI H , HU H . UCFS:building a usage controlled file system with a trusted platform module[C]// 1st Chinese Conf on Trust Computing Theory and Practice. 2009: 10-23.
[6]	YU A M , FENG D G , LIU R . TBDRM:a TPM based secure DRM architecture[C]// Int Conf on Computational Science and Engineering,Los Alamitos,CA. 2009: 671-677.
[7]	徐明迪, 张焕国, 赵恒 . 可信计算平台信任链安全性分析[J]. 计算机学报, 2010,33(7): 1167-1176.
	XU M D , ZHANG H G , ZHAO H . Security analysis of trust chain in trusted computing platform[J]. Chinese Journal of Computer, 2010,33(7): 1167-1176.
[8]	周振柳, 陈楣, 池亚平 ,等. 一种柔性可信计算机模型与实现方法[J]. 计算机工程, 2007,33(20): 156-158.
	ZHOU Z L , CHEN M , CHI Y P ,et al. A model and implementation of a flexible trusted computer[J]. Computer Engineering, 2007,33(): 156-158.
[9]	司丽敏, 蔡勉, 陈银镜 ,等. 一种信任链传递模型研究[J]. 计算机科学, 2011,38(9): 36-42.
	SI L M , CAI M , CHEN Y J ,et al. A study on trust chain transfer model[J]. Computer Science, 2011,38(9): 36-42.
[10]	国家密码管理局. 可信密码支撑平台技术规范[EB/OL]. .
	STATE ENCRYPTION ADMINISTRATION. Technical specification for trusted cryptographic support platform[EB/OL]. .
[11]	中国可信计算工作组. 可信计算密码支撑平台功能与接口规范[EB/OL]. .
	TRUSTED COMPUTING WORKING GROUP OF CHINA. The function and interface specification of trusted computing cryptographic support platform[EB/OL]. .
[12]	吴小强 . 基于龙芯处理器的可信计算机研究与设计[J]. 工业控制计算机, 2011,24(11): 26-30.
	WU X Q . Research and design of trusted computer based on Godson processor[J]. Industrial Control Computer, 2011,24(11): 26-30.
[13]	朱小波, 舒棚, 周晓霞 . 基于TCM的国产可信计算机的设计[J]. 信息技术, 2013,12(12): 102-105.
	ZHU X B , SHU P , ZHOU X X . Design of a domestic trusted computer based on TCM[J]. Information Technology, 2013,12(12): 102-105.
[14]	秦宇, 冯登国 . 基于组件属性的远程证明[J]. 软件学报, 2009,20(6): 1625-1640.
	QIN Y , FENG D G . Component property based remote attestation[J]. Journal of Software, 2009,20(6): 1625-1640.
[15]	CHALLENER D . 可信计算[M]. 北京: 机械工业出版社, 2009.
	CHALLENER D . A practical guide to trusted computing[M]. Beijing: China Machine PressPress, 2009.
[16]	张焕国, 赵波 . 可信计算[M]. 武汉: 武汉大学出版社, 2011.
	ZHANG H G , ZHAO B . Trusted computing[M]. Wuhan: Wuhan University PressPress, 2011.

Metrics

Recommended 0

No Suggested Reading articles found!

基本配置项	主要技术参数
可信模块	国产TCM
计算单元处理器	国产龙芯3A
操作系统内核	Linux 2.6.32
操作系统	中标麒麟4.1.1
数据库	达梦7.0

测试项目	测试次数	首次成功切换次数	成功率
插入非法USB	150	148	98.6%
关闭杀毒软件	150	150	100%
篡改核心文件	150	150	100%
打开非法网络端口	150	150	100%
合计	600	598	99.6%

Trust chain generating and updating algorithm for dual redundancy system

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 16

Related Articles 15

Metrics

Recommended 0

[1]	Xinfeng HE,Junfeng TIAN,Fanming LIU. Survey on trusted cloud platform technology [J]. Journal on Communications, 2019, 40(2): 154-163.
[2]	Junfeng TIAN,Tianle LI. Data integrity verification based on model cloud federation of TPA [J]. Journal on Communications, 2018, 39(8): 113-124.
[3]	Junfeng TIAN,Yongchao ZHANG. Trusted auditing method of virtual machine based on improved expectation decision method [J]. Journal on Communications, 2018, 39(6): 52-63.
[4]	Liang TAN,Neng QI,Lingbi HU. New extension method of trusted certificate chain in virtual platform environment [J]. Journal on Communications, 2018, 39(6): 133-145.
[5]	Xingshu CHEN,Wei WANG,Xin JIN. Label-based protection scheme of vTPM secret [J]. Journal on Communications, 2018, 39(11): 170-180.
[6]	Tian-shu WANG,Gong-xuan ZHANG,Xi-chen YANG. Trusted solution monitoring system based on ZigBee wireless sensor network [J]. Journal on Communications, 2017, 38(Z2): 67-77.
[7]	Wei FENG,Yu QIN,Deng-guo FENG,Bo YANG,Ying-jun ZHANG. Design and implementation of secure Windows platform based on TCM [J]. Journal on Communications, 2015, 36(8): 91-103.
[8]	Qian-ying ZHANG,Shi-jun ZHAO,Wei FENG,Yu QIN,Deng-guo FENG. Research of a trusted execution environment module for multiple platforms [J]. Journal on Communications, 2014, 35(Z2): 72-85.
[9]	Zhen-ji ZHOU,Li-fa WU,Zheng HONG,Hai-guang LAI,Cheng-hui ZHENG. Trusted virtual machine management model for cloud computing [J]. Journal on Communications, 2014, 35(Z2): 94-105.
[10]	. Research of a trusted execution environment module for multiple platforms [J]. Journal on Communications, 2014, 35(Z2): 11-85.
[11]	. Trusted virtual machine management model for cloud computing [J]. Journal on Communications, 2014, 35(Z2): 13-105.
[12]	. Research of platform identity attestation based on trusted chip [J]. Journal on Communications, 2014, 35(8): 13-106.
[13]	Qian-ying ZHANG,Deng-guo FENG,Shi-jun ZHAO. Research of platform identity attestation based on trusted chip [J]. Journal on Communications, 2014, 35(8): 94-106.
[14]	. WLAN Mesh security association scheme in trusted computing environment [J]. Journal on Communications, 2014, 35(7): 12-103.
[15]	Yue-lei XIAO,Yu-min WANG,Liao-jun PANG,Shi-chong TAN. WLAN Mesh security association scheme in trusted computing environment [J]. Journal on Communications, 2014, 35(7): 94-103.