Device and method for implementing credible embedded system on existing embedded equipment

Abstract

The invention discloses a credible embedded system on the basis of a safety module and aims to solve the technical problem of improving the safety of the existing embedded equipment. The credible embedded system disclosed by the invention comprises embedded equipment and the safety module. The embedded equipment is physically connected with the safety module by a serial bus, wherein the embedded equipment is an embedded system platform for implementing specific functions; and the safety module uses a FPGA (Field Programmable Gate Array) SOC (System On Chip) as a core and is used for providing functions of encryption and decryption operation of data, integrity measurement and the like for the embedded equipment and improving the safety of the embedded equipment in the process from start to operation. Compared with the prior art, an additional program storage is not added for the embedded equipment; an original hardware structure of the embedded equipment does not need to be changed; the safety module has simple circuit composition; and the credible embedded system has strong flexibility and simple application mode, is easy to implement and has general applicability.

Description

technical field [0001] The invention relates to the field of information security and the field of embedded system application, in particular to a method and device for realizing a trusted embedded system on existing embedded equipment. Background technique [0002] As the processing capability of embedded microprocessors increases day by day, embedded devices are used more and more widely. However, the security issues of embedded devices have not received enough attention and targeted solutions, and the security issues have become more and more prominent. Trusted computing is a new development direction in the field of information security, and its overall goal is to improve the security of computing systems. The basic idea of ​​trusted computing is: first establish a root of trust in the computer system, and then establish a chain of trust, starting from the root of trust to the hardware platform, to the operating system, and then to the upper-level application, first-lev...

AI Technical Summary

Problems solved by technology

However, it is obvious that this method needs to redesign the hardware system of the embedded device, so it cannot complete the goal of realizing trusted computing on the embedded device without changing the hardware structure of the embedded device.

The TPM (or TCM) chip is designed for general-purpose computer systems and does not have the bus interface that embedded systems usually have. Therefore, it is necessary to use hardware or software to convert the interface of different bus protocols, which increases the complexity of the application.

Images