A dual-system trusted computing system and method

Abstract

The invention discloses a dual-system trusted computing system and method. The system includes: a trusted management center and at least one dual-system trusted computing node connected to the trusted management center. The dual-system trusted computing node includes: a parallel The computing subsystem and the protection subsystem have a security isolation mechanism between the computing subsystem and the protection subsystem, and interact through a dedicated access channel; the computing subsystem is used to perform computing tasks, and the protection subsystem is used to The trusted policy measures and controls the computing subsystem, and sends the measurement records to the trusted management center, which is used for statistical analysis of the measurement records. The system and method provided by the present invention realize active security protection while computing through parallel computing subsystems and protection subsystems, ensuring that computing tasks are not disturbed and destroyed, and can resist various known and unknown attacks.

Description

technical field [0001] The invention relates to the field of information security, in particular to a dual-system trusted computing system and method. Background technique [0002] China is the largest network market in the world. With the popularization of the Internet, network security incidents have skyrocketed. Adopting the traditional mode of emphasizing computing and ignoring defense will lead to the intrusion of personal computers, the destruction of enterprise production systems, the failure of urban and rural infrastructure, and the destruction of important national information systems, and the impact will be everywhere. With the advent of the 5G network era and the rise of new computing and new applications such as mobile Internet, Internet of Things, cloud computing, big data, and fog computing, the network security situation has become more severe. Traditional systems based on firewalls, intrusion detection, and virus prevention , Vulnerability upgrades represen...

AI Technical Summary

Problems solved by technology

Adopting the traditional mode of emphasizing computing and ignoring defense will lead to the intrusion of personal computers, the destruction of enterprise production systems, the failure of urban and rural infrastructure, and the destruction of important national information systems. The impact will be everywhere.

With the advent of the 5G network era and the rise of new computing and new applications such as mobile Internet, Internet of Things, cloud computing, big data, and fog computing, the network security situation has become more severe. Traditional systems based on firewalls, intrusion detection, and virus prevention , Vulnerability upgrades represented by repairing security protection methods can no longer adapt to the current new situation

[0003] Traditional security protection methods such as firewalls, intrusion detection, and virus prevention are compared and killed based on the content of the signature database that has occurred. Faced with an endless stream of new vulnerabilities and attack methods, they are hard to guard against; Basic security principles may directly lead to leaks by insiders; in addition, traditional security protection methods can be controlled by attackers and become new attack platforms, such as "Prism Gate" which uses firewalls to steal information

Images