Dynamic measurement method based on a dual-architecture trusted computing platform

Abstract

The invention discloses a dynamic measurement method based on a trusted computing platform with a double-system structure. The trusted computing platform comprises a computing subsystem and a protection subsystem which are parallel. The computing subsystem is used for completing a computing task, and the protection subsystem is used for carrying out active measurement and active control on the computing subsystem according to a trusted strategy through a trusted platform control module. The dynamic measurement method comprises the steps that in the operation process of a computing subsystem, when the triggering condition of dynamic measurement is met. A protection subsystem conducts dynamic measurement on the computing subsystem through a control layer in a credible software base accordingto a credible strategy and obtained related information executed by an application in the computing subsystem. The dynamic measurement method provided by the invention is based on a trusted computingplatform with a dual-system structure, and utilizes the dynamic measurement method to dynamically measure the related information executed by the application in the operation process of the computingsubsystem, so that the whole process of the computing subsystem is measurable and controllable, and the safety performance of the computing subsystem is improved.

Description

technical field [0001] The invention relates to the field of trusted computing, in particular to a dynamic measurement method based on a dual-architecture trusted computing platform. Background technique [0002] The current cyberspace is extremely fragile, and cyberattacks such as Stuxnet, Wannacry, and Mirai that have caused great impacts emerge in endlessly and become increasingly rampant. The root cause is that the problem is not addressed from the root causes of network security risks, and the passive defense methods of "blocking and killing" represented by "firewall", "virus scanning and killing" and "intrusion detection" are blindly adopted, which is hard to prevent , especially in the face of attacks launched against the vulnerabilities of the target system, it is impossible to effectively defend at all. [0003] In order to solve the problems faced by the current cyberspace security, the international TCG organization has proposed a method of trusted computing, whi...

AI Technical Summary

Problems solved by technology

However, TPM is essentially just a passively mounted external device on the computer. It will only function when it is called by the host program. Once the host is controlled by an attacker, the TPM will not be able to play its role, and the use of TPM can only affect the firmware of the computer. Static measurement of resources such as executable programs and executable programs cannot be used for dynamic measurement of application execution and the execution environment it depends on. Resist, for example, Windows 10 fully implements TCG's Trusted Computing Architecture, but fails to prevent the Wannacry ransomware attack

As an external device passively attached to the computer, the TPM can only statically measure resources such as the firmware and executable programs of the computer through the host software call. There are limitations in resource access and control, and its security capabilities are completely dependent on the host. system security

Images