Method for implementing credible recovery system in operating system

Abstract

The invention discloses a method for realizing a trusted recovery system in an operating system. The method establishes transaction declaration system call to provide an interface of transaction establishment and submission for the trusted computing base (TCB) operation of a computer information system in order that the atomic nature of the TCB operation can be ensured by the trusted recovery system as long as the transaction declaration system call is used to declare a code section into transaction. The trusted recovery system consists of a transaction manager, a log system and log files. The transaction manager coordinates and manages the establishment, submission and recovery of the transaction. The log system intercepts and captures all the updated operations in the TCB operation and records the operations in the log files; after the transaction is completed, the operations are written back to a disk, thereby realizing the atomic nature of the TCB operation. When the computer system is invalid, as long as the data in the log files relevant to the TCB operation is repealed, the system can be reconstructed to a consistent state before the occurrence of a fault. The method for realizing the trusted recovery system in the operating system is suitable for mainstream operation systems, has wide application range and can increase the disaster tolerance of the operating system.

Description

technical field [0001] The invention relates to the technical field of operating systems, in particular to a method for realizing a trusted recovery system in an operating system. Background technique [0002] Information security is of great significance to the national economy and national security. In the current information security strategy, one of the core issues is that security product technology must and can only be independently developed and localized in my country to meet security needs. Operating system security is the foundation of information security. If any security-related program runs on an operating system with security holes, there is still a danger of being destroyed. Therefore, a high-level security operating system is the basis of all information security applications. [0003] Computer system security has no foundation without the security provided by the operating system. Unexpected system failures may destroy the consistency and security protect...

AI Technical Summary

Problems solved by technology

[0003] There is no foundation for computer system security without the security provided by the operating system

U

Images