Trusted computing platform of a computing and protection parallel double-system structure

Abstract

The invention discloses a trusted computing platform of a computing and protection parallel double-system structure. wherein the trusted computing platform comprises a computing subsystem and a protection subsystem which are parallel, the computing subsystem is used for completing a computing task, and the protection subsystem is used for carrying out active measurement and active control on the computing subsystem according to a trusted strategy through a trusted platform control module; And the protection subsystem is specifically used for respectively carrying out static measurement and dynamic measurement on the computing subsystem through the trusted software base. According to the trusted computing platform provided by the invention, active safety protection is realized while computing is realized through the computing subsystem and the protection subsystem which are parallel to each other. In addition to establishing a static trust chain which takes a trusted platform control module as a trust root for step-by-step measurement, a dynamic measurement mechanism based on a security trusted strategy is also designed, and active defense on the whole computer system in the starting and operating processes of the computer is realized.

Description

technical field [0001] The invention relates to the technical field of trusted computing, in particular to a trusted computing platform with parallel dual architecture of computing and protection. Background technique [0002] The current cyberspace is extremely fragile, and cyberattacks such as Stuxnet, Wannacry, and Mirai that have caused great impacts emerge in endlessly and become increasingly rampant. The root cause is that the problem is not addressed from the root causes of network security risks, and the passive defense methods of "blocking and killing" represented by "firewall", "virus scanning and killing" and "intrusion detection" are blindly adopted, which is hard to prevent , especially in the face of attacks launched against the vulnerabilities of the target system, it is impossible to effectively defend at all. [0003] In order to solve the problems faced by the current cyberspace security, the international TCG organization has proposed a method of trusted ...

AI Technical Summary

Problems solved by technology

However, TPM is essentially just a passively mounted external device on the computer. It will only function when it is called by the host program. Static measurement does not implement policy-based dynamic measurement when the computer is running, so the trusted computing architecture of TCG is basically difficult to resist when hackers use computer system logic flaws to attack. For example, Windows 10 fully realizes the trusted computing architecture of TCG. Computing architecture, but failed to prevent Wannacry ransomware attack

Images