Dynamic integrity protection method based on credible chip

Abstract

The invention discloses a dynamic integrity protection method based on a credible chip. The method comprises: 1) setting a standard updating program in a user mode, wherein the standard updating program is used for storing a measurement standard of dynamic changing file; initializing an NV storage area of a terminal-to-computer-multiplexer (TCM) chip by the standard updating program; and defining indexing, a size and an operation password of the NV storage area; 2) updating a standard of the file in the NV storage area by means of the standard updating program and the operation password after the file is updated by a user every time; and 3) setting a measurement module and a verification module in a kernel mode; calculating measurement results of the file by the measurement module when loading the dynamic changing file into an internal storage, and sending the measurement results to the verification module; and reading the standard of the file in the NV storage area by the verification module and comparing the standard, if being the same, judging that the integrity of the file is good by the measurement module, otherwise, judging that the file is illegally modified. The dynamic integrity protection method based on the credible chip effectively solves the problem that an inventory management assistant (IMA) can not measure and verify the dynamic changing file.

Description

technical field [0001] The invention relates to the field of information security, in particular to a dynamic integrity protection method based on a trusted chip. Background technique [0002] With the development of computer technology, the security of computer system has always been the focus of people. In particular, the code or data of a computer system may be illegally modified by a remote attacker. Traditional firewall methods, anti-virus software and password methods cannot fundamentally protect the integrity of computer systems. Internationally, the Trusted Computing Group (TCG) embeds a Trusted Platform Module (TPM) on the motherboard, and uses the chip to measure the system layer by layer to ensure that the system that starts up is safe and reliable. The domestic trusted computing standard "Trusted Computing Cryptographic Support Platform Function and Interface Specification" has also been formulated. By embedding a trusted cryptographic module TCM with its own c...

AI Technical Summary

Problems solved by technology

If an attacker illegally modifies the system configuration or security policy file, it may cause the service in the system to hang up or the security mechanism to fail

Images