Method and system for enhancing terminal trustworthiness based on virtualization technology

Abstract

The present invention provides a virtualization technology based terminal trust enhancement method and system. The method comprises: a trusted terminal, according to verification information stored in a Ukey, performing completeness verification on an operation system kernel file and a bare-type virtual machine related file, and starting an operation system after verification is passed; and the trusted terminal, according to a whitelist configuration file and a whitelist drive program, performing completeness verification on an application, a service and an external device drive that are loaded dynamically, so as to implement trust enhancement of the trusted terminal. According to the virtualization technology based terminal trust enhancement method and system provided by the present invention, the operation system is started according to verification information stored in the Ukey, a static trust chain is established, and operation system information is prevented from being leaked or tampered from internally; and completeness verification is performed on the loaded application according to the whitelist configuration file, a dynamic trust chain is established, and malicious attacks and unauthorized access are prevented from externally.

Description

technical field [0001] The present invention relates to the field of trusted computing, in particular to a method and system for enhancing terminal trustworthiness based on virtualization technology. Background technique [0002] With the popularization of terminals, terminal security has become an important issue that people pay attention to. How to realize terminal security and provide users with a reliable terminal computing environment has become an urgent problem to be solved. [0003] At present, for terminal security issues, especially terminal operating system security issues, traditional operating system security technologies such as firewalls, intrusion detection, and virus protection are mainly used to block illegal users who attempt to share information resources and access unauthorized access from the outside. [0004] However, these traditional operating system security technologies can only prevent malicious attacks and unauthorized access from the outside, a...

AI Technical Summary

Problems solved by technology

[0004] However, these traditional operating system security technologies can only prevent malicious attacks and unauthorized access from the outside, and cannot prevent the leakage or tampering of internal information of the terminal operating system.

Images