Customized server-based TCM application system and system guidance method

Abstract

The invention discloses a customized server-based TCM application system and a guidance method thereof. The customized server-based TCM application system is characterized in that the TCM application system comprises a trusted root module, a trusted hardware layer module, a trusted operating system and a trusted application system. The customized server-based TCM application system guidance method is based on the customized server-based TCM application system. According to the customized server-based TCM application system and system guidance method of the invention, application research is carried out on TCM trusted computation based on the customized server of the State Grid Corporation of China, how to modify parts in the transfer of a trusted chain is researched; based on analysis on the startup process of the system, it is found that a trusted BIOS module and a trusted MBR module can be modified in a customized manner; with a trusted BIOS adopted as a trusted root, a trusted relation is transferred to a trusted MBR, and the trusted relation is finally transferred to the trusted application system; by means of the double credibility authentication of the BIOS and the MBR, the credibility of the BIOS and MBR which have been modified in a customized manner can be fully utilized; and therefore, some problems appearing when only single expansion is performed on the BIOS can be solved, and the security and credibility of the system can be achieved.

Description

technical field [0001] The invention relates to a customized server-based TCM application system and system guidance method, in particular to a customized server-based TCM application system and system guidance method with high information security and controllability. Background technique [0002] With the continuous strengthening of the country's awareness of information security, especially after the "Prism Gate" incident, the entire country began to vigorously promote the improvement of independent controllability of information technology. The existing IT infrastructure generally adopts foreign products, which are poor in self-controllability, which is not conducive to the realization of security and controllability of information systems. With the advancement of IT infrastructure reform, especially the rapid development of "removing IOE" in recent years, domestic large-scale central enterprises, financial, medical, and communication companies have carried out x86 repla...

AI Technical Summary

Problems solved by technology

The existing IT infrastructure generally adopts foreign products, with poor self-controllability, which is not conducive to the realization of security and controllability of information systems

With the advancement of IT infrastructure reform, especially the rapid development of "removing IOE" in recent years, domestic large-scale central enterprises, financial, medical, and communication companies have carried out x86 replacement in various aspects and levels in order to improve system security and business application systems. Minicomputers and distributed storage replace centralized storage projects. However, due to the advancement of technology, system differences, and different implementation requirements, the current industry IT architecture lacks unified and authoritative normative guidance. The construction of modernization has brought hidden dangers

Images