Hardware architecture based on hardware security isolation execution environment and measurement method applying context integrity

Abstract

The present invention provides a hardware architecture based on a hardware security isolation execution environment and a measurement method applying context integrity. The hardware architecture comprises security isolation hardware, a security manager, a security service driver layer, and a security service interface layer, wherein the security isolation hardware provides a configurable hardwareisolation environment; the security manager can configure the security isolation hardware to work in a normal domain or a security domain; the security service driver layer is located in a kernel space of the normal domain for providing security services for a user space; and the security service interface layer is located in the kernel space of the security domain for providing security servicesfor the user space in the security domain. The security manager can perform conversion between the normal domain and the security domain, the security service driver layer calls the security manager to switch from the normal domain to the security domain, and the security service interface layer calls the security manager to switch from the security domain to the normal domain. The hardware architecture based on the hardware security isolation execution environment and the measurement method applying context integrity in the invention support both the measurement of the integrity of the code and the dynamic measurement to detect whether the code is tampered with by a malicious program.

Description

technical field [0001] The invention belongs to the technical field of trusted computing, and in particular relates to an application context integrity measurement method based on hardware security isolation execution environment. Background technique [0002] The current network attack method has changed from advanced hackers' individual combat to Advanced Persistent Threats (APTs) launched by hacker groups supported by governments or organizations. APT attacks use a number of unknown 0-Day vulnerabilities to attack enterprise core networks, important national infrastructure, and important confidential information systems. It has the characteristics of wide attack range, long duration, and strong concealment. The "Stuxnet" attack on Iran's nuclear facilities showed that even a physically isolated network cannot guarantee absolute security. The core feature of an APT attack is to use the 0-Day vulnerability of the system through media ferrying and social attacks to modify t...

AI Technical Summary

Problems solved by technology

The solution based on virtual machine isolation relies on the security of the management machine 320 and VMM310, has a large attack surface, and has a large software overhead, so it is suitable for the server environment, but it will bring a large amount to the PC terminal or mobile terminal. efficiency loss

Images