Dependable computing based process control method

Abstract

The invention provides a dependable computing based process control method. The process control method includes that a system is powered and a BIOS (basic input / output system) is started; the BIOS drives an operating system bootstrap program to start; the bootstrap program drives an integrity measurement module in an inner nuclear layer to start; the integrity measurement module drives a process control module in an operating system layer to start; the process control module is used for judging ordinary files, critical files and dynamic resources in process; the process control module and the integrity measurement module are used for controlling the ordinary files, the critical files and the dynamic resources to realize protection of the program. By the method, the files related to process operation are subjected to protection based on the dependable computing platform hardware algorithm, static files and the dynamic files are protected, permission of accessed files and mapping relation label pages are defended, and protective means are stereo and include the aspects of direct encryption storage, and inputting credibility quantity into a dependable computing platform register and the like, so that the process can be effectively controlled.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a process control method based on trusted computing. Background technique [0002] With the rapid development and wide application of information and network technology, a large number of various computer terminals are used in the information network, and the safe operation of the terminal is a difficult and important research point. In 1999, well-known IT companies such as IBM, HP, Intel and Microsoft initiated the establishment of the Trusted Computing Platform Alliance. The Alliance is committed to establishing a working group to formulate relevant standards for trusted computing. The working group defines the concept of trusted computing as being based on behavior. : An entity is trustworthy if it always behaves as expected. The main technical route of trusted computing is to first establish a root of trust in the computer system. The credibility of the root o...

AI Technical Summary

Problems solved by technology

[0005] Some of the above-mentioned patents use trusted platform modules to realize hardware and system control, and focus on analyzing the underlying aspects of the operating system such as process generation and thread operation mechanism in the process. The protection technology does not consider the analysis and analysis of files occupied by the process. Protection, the implementation efficiency is not high, and the algorithm of the trusted platform module is not fully utilized. In addition, most of the considerations are to prevent external malicious processes from running, and it does not involve the protection of the processes that should be running, and the effect is insufficient.

Images