Multilevel security trust chain construction method and structure

Abstract

The invention provides a multilevel security trust chain construction method. The multilevel security trust chain construction method comprises the following steps of step 1, obtaining a structure of a measurement event of every measurement module through a measurable root and sensing the structure of the measurement event of every measurement module to a multilevel security trusted password module and step 2, performing integrity measurement on every measurement module through the multilevel security trusted password module according to the structure of every measurement event and storing a result of the integrity measurement to achieve the multilevel security trust chain transfer. According to the multilevel security trust chain construction method, the multilevel security measurement mode for different levels of password algorithms can be implemented. The invention also provides a multilevel security trust chain construction structure.

Description

technical field [0001] The invention relates to the field of computer information security and trusted computing, in particular to a method and system for constructing a multi-level security trust chain. Background technique [0002] At present, trusted computing technology is an effective new technology to enhance the security of information system. Trusted computing technology enhances the security of information system through trusted cryptographic module TCM (Trusted Cryptographic Module). Encapsulates the security service functional unit, which is used to provide basic security services for the platform. Trust chain technology is one of the key technologies of trusted computing technology. The trust chain given by TCG (Trusted Computing Group) is defined as follows: [0003] CRTM→BIOS→OSLoader→OS→Applications; [0004] Among them, CRTM (Core Root of Trust for Measurement) is the root core of trusted measurement, BIOS (Basic Input and Output System) is the basic input...

AI Technical Summary

Problems solved by technology

[0006] However, in complex multi-level security systems, business systems have different security requirements for security levels, and application systems with different security levels are required to implement trust chain systems with corresponding security levels. However, existing trusted computing platforms can only implement one The trust chain system under the security level cryptographic algorithm cannot satisfy the multi-level security measurement method for different security level cryptographic algorithms

Images