Novel trust chain design method based on SM9 cryptographic algorithm

Abstract

The invention discloses a novel trust chain design method based on an SM9 cryptographic algorithm, and the design flow comprises initialization, the building of a secret key mapping table, the generation of signature information and the measurement verification. The beneficial effects of the invention lie in that (1), the method protects the expected measure value of an entity through employing the digital signature technology based on identity recognition, and effectively protects the integrity and reality of the information of the entity; (2), the method directly takes TPM as a trusted rootunder the condition that no CA certificate system is introduced, and the SM9 cryptographic algorithm is introduced; TPM serves as a secret key generation center, thereby achieving the flow of the digital signature and the signature verification, and guaranteeing the safe and credible of the whole process.

Description

technical field [0001] The invention relates to the field of trusted computing, in particular to a design method for a novel trust chain based on the SM9 cryptographic algorithm. Background technique [0002] (1) Trust chain design technology [0003] The transmission of the trust chain has always been a research hotspot in the field of trusted computing. At present, the TPM2.0 standard is widely used in the world. The Trusted Computing Organization proposes a method that takes TPM as the root of trusted measurement and passes the measurement and trust before loading. The method, one-level verification and one-level trust, realizes the measurement and verification from the hardware root of trust to the software of the application program, ensures that each component is not tampered with in the process of trust chain transmission, and basically solves the problem of platform startup. security risks. Traditional trust models such as figure 1 As shown, the definition of the ...

AI Technical Summary

Problems solved by technology

Traditional trust models such as figure 1 As shown, the definition of the traditional chain of trust model is relatively simple, and its basic functions are measurement, verification, and jumping. During the measurement verification process, the integrity of each component is verified by hash value

However, with the ever-changing requirements of products for information security, the security mechanism based on this way of transmitting the chain of trust has great security risks, including firmware modification, communication data being stolen, and configuration registers being reset

At present, relevant literature points out that the method of signing and verifying the signature using the common public key can effectively defend against such attacks, but the use of such methods must introduce the CA certificate management system, which increases the complexity of the application process

Images