Control flow model behavior based dynamic remote attestation method

Abstract

The invention provides a control flow model behavior based dynamic remote attestation method. The method includes: S1, a service provider performs rule formulation for dynamic change conditions during task running according to user safety requirements so as to generate a policy certificate; S2, a mobile terminal obtains the policy certificate and executes policy control, wherein policy control refers to that the mobile terminal performs system access control in an operation system based on a control flow model and the policy certificate; and S3, if the operation system discovers that control change is caused by change of monitoring point conditions in the control flow model, the mobile terminal initiatively initiates remote attestation, or the service provider initiatively initiates remote attestation according to requirements of the terminal. By the aid of the control flow model behavior based dynamic remote attestation method, computing environment safety credibility of the mobile terminal can be better verified.

Description

technical field [0001] The present invention relates to the field of computer and electronic information technology, in particular to a dynamic remote proof method based on the behavior of the control flow model BPCF model. Background technique [0002] Verifying that the computing environment is secure and trustworthy is an important goal of trusted computing. With the development of technology, security threats on mobile terminals are also increasing. Research shows that 800,000 people were infected with malware every month in 2011 on the Android platform alone. Traditional anti-virus, intrusion detection and other security mechanisms also rely on the security support of the underlying operating system. Trusted computing technology achieves the purpose of ensuring computer security and reliability by enhancing the overall security of the entire computing system from the root of trust to trusted hardware, to trusted operating systems, and to trusted applications. "Truste...

AI Technical Summary

Problems solved by technology

However, the traditional access control model has problems such as "lack of operating system subject" and "lack of behavior constraints", which cannot meet the control requirements of more complex security policies

Images