Terminal credible security system and method based on credible computing

Abstract

The invention relates to a terminal credible security system which comprises a user identity credible security module, a terminal device credible security module, a platform credible security module.The user identity credible security module is used for setting lists for storing important documents of users and utilizing a kernel protection mode to ensure that the lists of the important documentscan not be revised by non-authorized users; the terminal device credible security module is used for controlling the writing function of mobile devices of U disks, and the like; and the platform credible security module is used for preventing malicious programs from operating. The invention also relates to a terminal credible security method which comprises a user identity credible security step,a terminal device credible security step and a platform credible security step, wherein the user identity credible security step is used for setting the lists for storing the important documents andensuring that the lists of the important documents can not be revised; the terminal device credible security step is used for controlling the writing function of the mobile devices of U disks, and thelike; and the platform credible security step is used for preventing the malicious programs from operating.

Description

technical field [0001] [01] This application relates to a trusted computing method and system for ensuring the security of the terminal environment, which can realize active defense against viruses, and belongs to the field of computer information security. Background technique [0002] [02] In 2003, the Trusted Computing Group (Trusted Computing Group) composed of Intel, Hewlett-Packard, Microsoft, IBM and other companies proposed the "Trusted Computing" technology. "Trusted" means that users can fully trust that the computer's behavior will fully follow the design. The Trusted Computing Organization's description of technical trust is: "If an entity's behavior is always in accordance with the expected way and goal, Then it's believable." The user's expectation of the terminal must be "not to be damaged by viruses, Trojan horses and other malicious programs". If the terminal is protected by trusted computing technology, the terminal is trustworthy to the user, that is, saf...

AI Technical Summary

Problems solved by technology

However, the above-mentioned WO2006 / 045644 international patent application and WO2006 / 011943 international patent application only provide methods for building trusted devices and trusted platforms, but fail to form a trusted system, while Chinese patent application No. 20051003076.1 cannot guarantee Any process in the system is the process expected by the user, and there is no guarantee that the user's behavior will be executed in the expected way

Images