Trusted computing system and security protection system

Abstract

The invention provides a trusted computing system and a security protection system. A trusted cryptographic module in the trusted computing system provides cryptographic operation support for a trusted computing platform; the trusted platform control module adds a trust root on the basis of the trusted password module and combines a password with control. The trusted computing platform performs trusted measurement on each node of the trusted computing system; the trusted BIOS platform provides support for trust chain transmission of the trusted computing platform; the trusted software module performs trusted verification on each node of the trusted computing system and monitors the trusted computing system. The trusted application software is used as a system call between the trusted computing platform and the trusted cryptographic module; and the network layer performs strategy verification on the trusted application software, the trusted computing platform and the trusted cryptographic module. Through the trusted computing system with coexistence of operation and protection under the control of the security trusted strategy, security protection can be effectively provided for the network space in the big data environment.

Description

technical field [0001] The present application relates to the technical field of trusted computing, in particular, to a trusted computing system and a security protection system. Background technique [0002] Most of the current network security systems are mainly composed of firewalls, intrusion detection, and virus detection and killing, which are called the "old three". First of all, the old third sample is compared and killed based on the content of the signature database that has occurred. Faced with the endless new vulnerabilities and attack methods, this passive response is hard to guard against; It violates the basic security principles; third, the old third can be controlled by attackers and become a platform for network attacks, so the network security risk is extremely high. [0003] Due to the limitations of people's cognitive logic of IT, all logical combinations cannot be exhausted, and they can only be limited to completing computing tasks to design IT system...

AI Technical Summary

Problems solved by technology

[0003] Due to the limitations of people's cognitive logic of IT, all logical combinations cannot be exhausted, and they can only be limited to completing computing tasks to design IT systems. There must be defects of incomplete logic, thus forming a network security problem that is difficult to deal with attacks by humans using defects.

Images