Multi-level security trust chain construction method and system

Abstract

The present invention provides a method for constructing a multi-level security trust chain, which includes the following steps: S1. The measurable root obtains the structure of the measurement event of each measurement module, and sends the structure of the measurement event of the measurement module to the multi-level security trusted password module; S2, the multi-level security trusted cryptographic module measures the integrity of each measurement module according to the structure of the measurement event; and stores the result of the integrity measurement to complete the multi-level security-oriented trust chain transfer. The invention can realize the multi-level security measurement mode for different levels of encryption algorithms. The invention also provides a multi-level security trust chain construction system.

Description

technical field [0001] The invention relates to the field of computer information security and trusted computing, in particular to a method and system for constructing a multi-level security trust chain. Background technique [0002] At present, trusted computing technology is an effective new technology to enhance the security of information system. Trusted computing technology enhances the security of information system through trusted cryptographic module TCM (Trusted Cryptographic Module). Encapsulates the security service functional unit, which is used to provide basic security services for the platform. Trust chain technology is one of the key technologies of trusted computing technology. The trust chain given by TCG (Trusted Computing Group) is defined as follows: [0003] CRTM→BIOS→OSLoader→OS→Applications; [0004] Among them, CRTM (Core Root of Trust for Measurement) is the root core of trusted measurement, BIOS (Basic Input and Output System) is the basic input...

AI Technical Summary

Problems solved by technology

[0006] However, in complex multi-level security systems, business systems have different security requirements for security levels, and application systems with different security levels are required to implement trust chain systems with corresponding security levels. However, existing trusted computing platforms can only implement one The trust chain system under the security level cryptographic algorithm cannot satisfy the multi-level security measurement method for different security level cryptographic algorithms

Images