Active trusted computing method and active trusted computing system based on TrustZone sub-core asynchronous execution

Abstract

The invention discloses an active trusted computing method and system based on TrustZone kernel asynchronous execution. According to the invention, the active trusted computing system is configured and started after a computer is powered on; the system comprises a trusted computing main body service, a trusted computing proxy service and a trusted computing calling interface, wherein the trusted computing main body service and the trusted computing proxy service are mapped into the TEE, the trusted computing calling interface and the host system are mapped into the REE, and the active trustedcomputing system can execute trusted computing, resource monitoring and real-time intervention according to needs. According to the invention, a new trusted computing architecture can be realized on the basis that the TrustZone basic service is passively executed; various requirements of trusted computing of active defense can be met, active trusted measurement and control problems are fully considered, active operation and resource access capacity can be provided in a simple mode, a TEE is prevented from occupying a CPU for a long time, and mechanisms such as interruption of a host system areprevented from being influenced by timeout and the like.

Description

technical field [0001] The invention relates to an active trusted computing technology in the computer field, in particular to an active trusted computing method and system based on TrustZone sub-core asynchronous execution. Background technique [0002] The basic idea of ​​trusted computing is: first build a root of trust in the computer system, root of trust is the most basic part of trusted computing, it is the part that must be given trust, and then establish a chain of trust, starting from the root of trust to From the software and hardware platform, to the operating system, and then to the application, there is a level of measurement and certification, a level of trust, and a level of trust. Finally, trust is extended to the entire computer system, thereby ensuring the credibility of the computer system. The trusted base module started with the TPM1.0 specification formulated by the Trusted Computing Platform Alliance (Trusted Computing Platform Alliance) in 2000. Tra...

AI Technical Summary

Problems solved by technology

However, the basic service of TrustZone is designed with the idea of ​​passive execution, and the existing design does not consider the issue of active trustworthiness measurement and control

Images