System and method for trusted operating system to create trusted process based on trusted chip

Abstract

The present invention provides a system and a method for a trusted operating system to create a trusted process based on a trusted chip. The method comprises: installing the trusted operating system on a hardware system based on the trusted chip, creating a trusted process, and after encrypting the trusted process, operating the encrypted trusted process in a trusted memory area of a memory unit. Communication cannot be implemented between the trusted process and the general process, and effective isolation is realized between the trusted process and the general process in the memory space and data communication, so that the potential risk to the trusted process caused by the general process can be effectively avoided, and security of sensitive data can be guaranteed. According to the system and the method provided by the present invention, system security is guaranteed comprehensively from hardware to the operating system and to the application process; and according to the system platform established based on the present invention, not only use requirements of ordinary users can be satisfied, but also specific requirements of institutional users with high requirements for data security can be satisfied.

Description

technical field [0001] The invention relates to a system and method for creating a trusted process based on a trusted operating system of a trusted chip, belonging to the technical field of information security. Background technique [0002] In today's era, with the rapid development of information network technology, information data has become a strategic resource concerning the overall situation, and important network information systems have become the lifeline of the country. As the underlying platform support, the security of the operating system is particularly important. [0003] The process is the basic unit of the operating system structure and the entity of the program. When the process is executed, various resources (memory, storage, configuration files, etc.) in the system need to coordinate actions to ensure the normal operation of the system. Intrusion into the system will pose a security threat to normal processes and their resources. On the other hand, once...

AI Technical Summary

Problems solved by technology

[0003] The process is the basic unit of the operating system structure and the entity of the program. When the process is executed, various resources (memory, storage, configuration files, etc.) in the system need to coordinate actions to ensure the normal operation of the system. Intrusion into the system will pose a security threat to normal processes and their resources. On the other hand, once a memory leak occurs, sensitive data in plain text will be leaked

Images