A terminal trusted authentication method and system based on electronic signature

Abstract

The present invention provides a terminal credible authentication method and system based on an electronic signature. The method includes: sending an application signature request corresponding to a terminal application to a management and control center, and the management and control center authenticates the terminal application, and after the authentication is passed, the management and control center conducts an authentication of the terminal application. The terminal application issues a signature certificate; creates a virtual security domain and divides the network into isolated areas; during the installation process of the terminal application in the virtual security domain, the virtual security domain sends a verification request to the management and control center, and the management and control center verifies the terminal application according to the verification request. Whether the signature certificate is legal; if so, the terminal application is installed and started in the virtual security domain, and the terminal application after startup accesses the isolated area; the firewall monitors the traffic of the terminal application in the virtual security domain. When the traffic of the terminal application is abnormal , the firewall performs abnormal blocking processing on the abnormal terminal application. Avoid the whitelist mechanism, and realize the trusted authentication of terminal applications through electronic signatures.

Description

technical field [0001] The present invention relates to the field of trusted technology, in particular to a terminal trusted authentication method and system based on an electronic signature. Background technique [0002] Trusted Computing (Trusted Computing, referred to as TC) is a technology promoted and developed by TCG (Trusted Computing Group). Trusted computing is a trusted computing platform supported by hardware security modules that is widely used in computing and communication systems to improve the overall security of the system. Trusted computing is born for behavioral security. Among them, one of the core goals of trusted computing is to ensure the integrity of the system and terminal applications, so as to ensure that the system or software is running in the trusted state expected by the design target. Trusted computing is not the same as security, but it is the basis of security, because security solutions and policies can only further ensure security purpose...

AI Technical Summary

Problems solved by technology

[0010] 1. The maintenance workload of the whitelist list is relatively large;

[0011] 2. There is a risk of bypassing the whitelist. Once hackers know the restriction principle of the whitelist, they can bypass the whitelist and start malicious terminal applications;

[0012] 3. After the whitelist terminal application is started, it is difficult to detect malicious injection or tampering

[0015] 1. The accuracy of behavior detection is difficult to guarantee;

[0016] 2. The behavior whitelist is introduced, and the maintenance workload is relatively large;

[0017] 3. Hackers know the whitelist mechanism and bypass the whitelist, which poses a security risk

Images