One-machine multi-user security access control method

Abstract

The invention aims to provide a one-machine multi-user security access control method based on a trusted computing module (TCM) and a universal serial bus (USB) key, and solves the problems of multi-user information storage insecurity, absence of running data security after the login of a user with legal identity, resource wasting of a plurality of hard disks required by a plurality of users and the like under an identical operating system. In the method, security file access control over the users is realized in a kernel mode by combining USBKey hardware equipment and a TCM chip, user identity information is stored in the security storage area of the USBKey hardware equipment in form of cipher text, an encryption process is finished in the TCM chip by adopting a standard cryptographic algorithm, the security of private keys is protected by an SMK, the USBKey hardware equipment can be carried along by the user, and the security storage of private information of the user is realized.

Description

technical field [0001] The invention belongs to the technical field of computer information security, and in particular relates to a single-machine multi-user security access control method based on a TCM chip and a USBKey device. Background technique [0002] Due to many government agencies, confidential markets and large companies in the country, many people or departments share a secure computer in many cases. In order to meet the independence, security and confidentiality of each user's information data on the same machine , other non-authorized users have no access requirements. On the basis of comprehensive consideration of various security factors, a set of security access control methods based on kernel level for single computer and multiple users is developed. [0003] At present, the security access control for single-machine and multi-user in the market mainly includes: [0004] Authorize access to users based on user passwords and passwords of the operating sys...

AI Technical Summary

Problems solved by technology

[0011] The purpose of the present invention is to provide a single-machine multi-user security access control method based on TCM and USBKey, which solves the insecurity of multi-user information storage under the same operating system, the lack of security and confidentiality of data during operation after a user with a legal identity logs in, multi-user, Problems such as resource waste of multiple hard disks

Images