White list library file protection method based on trusted computing

Abstract

The invention discloses a white list library file protection method based on trusted computing, which comprises the following steps: firstly, extending a metric value of a trusted service agent into aspecified platform configuration register, then measuring a white list library file after receiving an encapsulation request, and calculating a file hash value; performing data encapsulation on the measured hash value and a specified platform configuration register, measuring the white list library file again after a verification request is received, decapsulating encapsulated data, and finally comparing the two hash values to judge whether the library file is modified or not. High-security white list library file protection can be realized, the packaged data is generated by the state of thetrusted service agent and the white list library file metric value together with the trusted cryptographic chip, and any one of the trusted service agent, the white list library file and the trusted chip can be discovered in time when being tampered; and the white list library file is protected to be real and effective.

Description

technical field [0001] The invention relates to the technical field of trusted computing security, in particular to a trusted computing-based whitelist library file protection method. Background technique [0002] White list is a kind of security technology and has been used in many security applications, such as firewall, mail system, authorized access system and so on. The whitelist mechanism is to add "good" and "allowed" program information or data information to the whitelist and store them in the whitelist library. When a security application receives a program or data request, it judges the information by comparing it with the whitelist. Whether the program or data is "good" and "allowed", for those not in the white list or inconsistent with the information in the list, it will be processed through the corresponding security policy. [0003] The whitelist library file is one of the foundations of the whitelist security mechanism. Once the library file is tampered wit...

AI Technical Summary

Problems solved by technology

[0003] The whitelist library file is one of the foundations of the whitelist security mechanism. Once the library file is tampered with but not found, the security application loses the meaning of comparing with the whitelist list and cannot perform security functions normally.

Most of the security applications will protect the whitelist library files to a certain extent, but the software-based protection methods have never been able to properly solve the problem of illegally obtained secrets, leaving security risks

Images