A system interaction method based on a trusted computing platform with a double-system structure

Abstract

The invention discloses a system interaction method based on a trusted computing platform with a double-system structure. The trusted computing platform is characterized in that the trusted computingplatform comprises a computing subsystem and a protection subsystem which are parallel, the computing subsystem is used for completing a computing task, and the protection subsystem is used for carrying out active measurement and active control on the computing subsystem according to a trusted strategy through a trusted platform control module; the system interaction method comprises the steps that the protection subsystem obtains host resource information of the computing subsystem through the host resource access interface and directly controls the computing subsystem, and / or the protectionsubsystem and the computing subsystem conduct information transmission and cooperative control through the communication interaction interface. According to the system interaction method provided by the invention, the protection subsystem obtains the host resource information of the computing subsystem through the host resource access interface and directly controls the computing subsystem, and the protection subsystem and the computing subsystem can also perform information transmission and cooperative control through the communication interaction interface.

Description

technical field [0001] The invention relates to the technical field of trusted computing, in particular to a system interaction method based on a dual-architecture trusted computing platform. Background technique [0002] The current cyberspace is extremely fragile, and cyberattacks such as Stuxnet, Wannacry, and Mirai that have caused great impacts emerge in endlessly and become increasingly rampant. The root cause is that the problem is not addressed from the root causes of network security risks, and the passive defense methods of "blocking and killing" represented by "firewall", "virus scanning and killing" and "intrusion detection" are blindly adopted, which is hard to prevent , especially in the face of attacks launched against the vulnerabilities of the target system, it is impossible to effectively defend at all. [0003] In order to solve the problems faced by the current cyberspace security, the international TCG organization has proposed a method of trusted compu...

AI Technical Summary

Problems solved by technology

However, the TPM is essentially just a passively mounted external device on the computer. It will only function when it is called by the host program. Once the host is controlled by the attacker, the TPM will not be able to play its role, resulting in TCG's trusted computing architecture. When hackers exploit computer system logic flaws to attack, it is basically difficult to resist. For example, Windows 10 fully implements TCG's trusted computing architecture, but it fails to prevent the Wannacry ransomware attack

Images