Trustiness measuring method for installing and upgrading software

Abstract

The invention provides a trustiness measuring method for installing and upgrading software. The method comprises the following steps of: 1, in the case that a computer of a user is a trusted computer, prompting to download UCM (Unified Change Management) software from a trusted UCM provider by a system after the trusted computer is started; 2, determining whether to download and install the UCM software, if agreeing to install the UCM software, executing a step 3, otherwise, failing in downloading and updating of any software; and 3, executing subsequent various application software to finish installing or upgrading work. According to the method, the installed or upgraded software can be effectively measured, so that the installed or upgraded software is safe and trusted.

Description

technical field [0001] The invention relates to the technical field of computers, in particular to a method for measuring the credibility of software installation and upgrading, which can effectively measure the installed or upgraded software and make the installed or upgraded software safe and credible. Background technique [0002] At present, in order to meet the requirements of trusted computer users for installation and continuous update and upgrade of various application software, many methods and suggestions have been proposed to measure installed or upgraded software. However, the existing credibility mechanism is not concise and perfect enough, and there are still the following shortcomings: [0003] 1) Since the trusted measurement value adopts an iterative calculation method, if a component is added or deleted after the trust chain is formed, or the software version is upgraded, all trust values ​​must be recalculated, which increases the difficulty of maintenance...

AI Technical Summary

Problems solved by technology

However, the existing credibility mechanism is not concise and perfect enough, and there are still the following shortcomings:

[0003] 1) Since the trusted measurement value adopts an iterative calculation method, if a component is added or deleted after the trust chain is formed, or the software version is upgraded, all trust values ​​must be recalculated, which increases the difficulty of maintenance and management ;

[0004] 2) According to the trust theory, the trust value will be lost during the transmission process, the longer the transmission path, the greater the loss

However, the existing technology 2 has the following disadvantages: it only measures the credibility of the original application layer program, but does not consider the trustworthiness judgment of the upgraded application program, and the trust loss is relatively large during the measurement process of installing and deleting software. Big

[0013] To sum up, there are many deficiencies in the existing chain trust structure of TCG: 1) Since the trusted measurement value adopts an iterative calculation method, if a component or software is added or deleted after the trust chain is formed For version upgrades, all trust values ​​must be recalculated, which increases the difficulty of maintenance and management; 2) According to the trust theory, the trust value will be lost during the transmission process, and the longer the transmission path, the greater the loss

Due to the long trust transmission path of the chain trust structure, it is easy to cause loss of trust

Images