Static measurement method of trusted computing platform based on double-system structure

Abstract

The invention discloses a static measurement method of a trusted computing platform based on a double-system structure, the trusted computing platform is composed of a protection subsystem and a computing subsystem which operate in parallel, and the protection subsystem is connected with the computing subsystem through a PCIE interface and a preset interface; when the trusted computing platform ispowered on, the trusted platform control module is started before the host CPU; trusted measurement is carried out on startup codes which need to be loaded and executed when the computing subsystem is started one by one; the purpose that the trusted platform control module carries out active security defense on the starting process of the host can be achieved. As the trusted platform control module is relatively independent and has higher control authority, the security defense function of the trusted platform control module does not depend on the security performance of the host system, andthe technical effect of improving the security performance of the host is further achieved.

Description

technical field [0001] The invention relates to the field of network security, in particular to a static measurement method and device, a storage medium and a processor of a trusted computing platform based on a dual architecture. Background technique [0002] The current cyberspace is extremely fragile, and cyberattacks such as Stuxnet, Wannacry, and Mirai that have caused great impacts emerge in endlessly and become increasingly rampant. The root cause is that the problem is not addressed from the root causes of network security risks, and the passive defense methods of "blocking and killing" represented by "firewall", "virus scanning and killing" and "intrusion detection" are blindly adopted, which is hard to prevent , especially in the face of attacks launched against the vulnerabilities of the target system, it is impossible to effectively defend at all. [0003] In order to solve the problems faced by the current cyberspace security, the international TCG organization...

AI Technical Summary

Problems solved by technology

However, the TPM is essentially just a passively mounted external device on the computer. It will only function when it is called by the host program. Once the host is controlled by the attacker, the TPM will not be able to play its role, resulting in TCG's trusted computing architecture. It is basically difficult to resist when hackers use the logical flaws of the trusted computing platform to attack

Images