A control method and system for trusted security services

Abstract

The invention provides a trusted security service control method and system. If an APP (application) has corresponding permissions, the APP is allowed to access to TCS (TSS (trusted software stack) core service) layer and further access to security feature of a TPM (trusted platform module) / MTM (mobile trusted module). The APP with the corresponding permissions can assess to the TCS layer, the permissions of the APP is maintained by a permission control layer defined and expanded by the trusted security service control method and system, and the permissions are managed and distributed through independent permission management service. Compared with the prior art, the trusted security service control method and system has the advantages that the problem about maintenance difficulty in protected resource objects using the TPM / MTM and local TPM user passwords is solved; the APP do not need to be a direct user of the TPM, TPM user passwords do not need to be maintained, and the TCS layer can be accessed after the APP has the corresponding permissions. Meanwhile, through enhanced security services of the TPM / MTM, and the APP can use the TPM / MTM friendly.

Description

technical field [0001] The invention relates to the field of trusted computing in communication technology, in particular to a method and system for controlling trusted security services. Background technique [0002] TCG (Trusted Computing Group, Trusted Computing Group) is an industry standard organization for trusted computing implementation. TCG released TPM (Trusted Platform Module, Trusted Platform Module), MTM (Mobile Trusted Module, Mobile Trusted Module), TSS (Trusted Software Stack, Trusted Software Stack), TNC (Trusted Network Connect, Trusted Network Connection) and other related A series of versions of standards documents. [0003] Among them, TPM and MTM are the core contents of TCG. TPM / MTM is a terminal security enhancement technology that can significantly enhance the security of terminal services, such as content copyright protection, payment, and hard disk encryption. When these services are deployed on terminals on TPM / MTM, the security will be improved...

AI Technical Summary

Problems solved by technology

But the ensuing problem is: if the password is stolen, it may affect the business security of the APP and the risk of TPM / MTM being abused, so the password owner needs to spend a lot of resources to store and keep the password secret.

[0006] On the other hand, TSS lacks higher-level encapsulation, which affects the use of developers on smart terminals, and requires a higher-level encapsulation of trusted service control methods, so that application developers can use TPM / MTM in friendly applications.

Images