Dual-architecture trusted operating system and method

Abstract

The invention discloses a dual-architecture trusted operating system and method, and the system comprises a common computing kernel, a trusted computing kernel, a monitoring management module and a hardware mangament module as well as a memory mangament module. The common computing kernel is configured with a trusted computing kernel agent for obtaining a common computing kernel state request forprocessing, and carrying out semantic analysis on kernel semantics through a trusted computing kernel agent, and sending the kernel semantics to the trusted computing kernel. The trusted computing kernel comprises a kernel strategy module used for generating a trusted computing strategy and analyzing the semantics of the common computing kernel. The monitoring management module is used for monitoring, measuring and controlling the state of the common computing kernel. The hardware management module is used for distributing and scheduling hardware resources according to a trusted computing strategy. The memory management module is used for allocating and scheduling the memory resources according to the trusted computing strategy. System operation can be actively protected on the basis of not interfering system services, and the trusted computing kernel is compatible with various computing architectures and is more suitable for being applied to terminals with diversified service softwareand hardware environments or high security levels.

Description

technical field [0001] The invention relates to the technical field of operating system security, in particular to a dual-architecture trusted operating system and a method thereof. Background technique [0002] The early research on the security operating system architecture was concentrated on the basis of the macro-kernel operating system, which can be divided into standard-oriented security architecture and application-oriented security architecture. attack. Therefore, the security architecture of the operating system based on the microkernel is gradually recognized. After the concept of trusted computing was proposed, there have been many researches on the security architecture combined with the idea of ​​trusted computing, such as the PERSEUS system of the typical representative L4 microkernel. , Google's ASM framework and GP's TEE architecture, etc. Among them, PERSEUS improves the isolation and operating efficiency between processes on the basis of Mach, and provid...

AI Technical Summary

Problems solved by technology

[0003] In view of this, the embodiment of the present invention provides a dual-architecture trusted operating system and method to solve the problem of how to efficiently run the operating system in a secure environment

Images