Star trust chain supporting embedded platform application program integrality verification method

Abstract

The invention discloses an application program integrity verification method for an embedded platform supported by a star trust chain. The embedded platform is provided with a TPM realized by an independent hardware which is taken as a trusted measurement of the whole platform, and the TPM uses a hardwire to control the operation of the embedded platform; the inside of the TPM is integrated with a trusted computing root, a trusted storage root and a trusted report root by adopting a physical mode so as to have physical protection on the TPM and a connecting circuit; and the TPM forms star trust relationship with the embedded platform Bootloader, an operating system kernel and a root file system. The method is characterized in that an integral application program which needs trust expansion in the root file system is subjected to trusted measurement by the trusted computing root of the TPM, and an obtained trusted measurement value is saved in the trusted storage root of the TPM; and the application program is subjected to integrity measurement during the starting of an operating system, then an obtained measurement value is compared with the trusted measurement value, and the integrity verification of the application program passes if the obtained measurement value is consisted with the trusted measurement value, otherwise, the integrity verification fails.

Description

technical field [0001] The invention belongs to the field of trusted computing platforms, in particular to a method for verifying the integrity of embedded platform application programs supported by star trust chains. Background technique [0002] In the computer operating environment, "trust" is a complex concept. When the process and final results of all operations are consistent with the expectations of legal operators, the environment can be considered trustworthy. In the ISO / IEC 15408 standard, there is the following definition: the behavior of a trusted component, operation or process is always predictable under any operating conditions, and its process and results are always predictable, and it can well resist application anomalies, viruses , and to a certain extent damage caused by physical interference. [0003] The Trusted Computing Group (Trusted Computing Group, TCG) is committed to software security and hardware computing platforms with security and trust capab...

AI Technical Summary

Problems solved by technology

[0014] Block→BIOS→Bootloader→OS kernel, this method is easy to cause trust loss between multi-level measurement agents

Therefore, when the application is running, the operating system needs to be used to measure the integrity of the application, and the loss of trust will be greater

Images