Application software loading execution control system based on trusted computing technology

Abstract

The invention discloses an application software loading execution control system based on a trusted computing technology, and relates to the technical field of computers, the system comprises a trusted computing technology module, a control center module, an early warning module and a processor; the trusted computing technology module comprises a trusted execution environment module, a trusted software technology module and a trusted hardware technology module, and the trusted computing technology module is used for jointly forming a trusted computing infrastructure and providing a solid guarantee for safe and stable operation of the application software loading execution system; and the trusted execution environment module is used for constructing a secure monitoring system and comprises an execution environment module, a design security architecture, a development trusted monitoring module and an information system deployment architecture module. The safety of the computing platform is protected through cooperative work of hardware and software, and the safety of the whole application software execution control system is improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to an application software loading and execution control system based on trusted computing technology. Background Art

[0002] Trusted computing is a technology promoted and developed by the Trusted Computing Group. Trusted computing is a trusted computing platform supported by hardware security modules that are widely used in computing and communication systems to improve the overall security of the system. Computers can use trusted computing technology to ensure that no spyware is installed on the computer to steal sensitive biometric information to build a secure monitoring system. With the rapid development of information technology, protecting data and ensuring the security of the system has become increasingly important. Trusted computing technology is a method used to ensure the security and trustworthiness of the computing platform. It can provide additional security for the monitoring system and improve the security efficiency of the application software execution control system.

[0003] Due to the rapid development of information technology, software has become an indispensable part of the operation of modern society. Problems such as software vulnerabilities, malicious codes and hacker attacks have also followed, posing severe challenges to software security. It is particularly important to research and develop trusted software technology. An application software loading and execution control system based on trusted computing technology is needed.

[0004] On this basis, after searching the patent network, Chinese patent announcement number CN117827324A discloses a high real-time software control system, method and electronic equipment, the application software layer is used for whole vehicle information interaction, the whole vehicle information includes basic task information and high real-time task information; the basic software layer is used to provide storage services for the application software layer; the first operation module and the second operation module are located between the application software layer and the basic software layer, the first operation module is used to realize the interaction between the application software layer and the basic software layer based on the basic task information, and the second operation module is used to realize the interaction between the application software layer and the basic software layer based on the high real-time task information;

[0005] It can be seen that there are shortcomings in the above patent application: the above traditional software control system has relatively single functions, and the amount of calculated data is large, the system processing process is complicated and the intelligent efficiency is poor, and the system lacks the function of information monitoring security, and cannot realize the online early warning work when a fault is found. The scope of use of the system is limited, which can easily cause the safety performance of the application software execution control system to be reduced, which will cause losses to people.

[0006] Aiming at the above problems, an application software loading and execution control system based on trusted computing technology is proposed. Summary of the invention

[0007] The purpose of the present invention is to provide an application software loading and execution control system based on trusted computing technology. The system is used to work, thereby solving the problem that the traditional application software loading and execution control system in the above-mentioned background technology has relatively single functions, large amount of calculation data, complex system processing process and poor intelligent efficiency, and the system lacks the function of information monitoring security, and cannot realize the start of online early warning work when a fault is found. The system has a limited scope of use, which can easily cause the safety performance of the application software execution control system to be reduced, causing losses to people.

[0008] To achieve the purpose of the present invention, the technical solution provided by the present invention is as follows: an application software loading and execution control system based on trusted computing technology comprises: a data collection and monitoring module, a trusted computing technology module, a control center module, an early warning module and a processor; the data collection and monitoring module, the trusted computing technology module, the control center module and the early warning module are electrically connected to the processor;

[0009] Preferably, the trusted computing technology module includes a trusted execution environment module, a trusted software technology module and a trusted hardware technology module, and the trusted computing technology modules are used to jointly constitute the basic architecture of trusted computing, providing a solid guarantee for the safe and stable operation of the application software loading and execution system;

[0010] Preferably, the trusted execution environment module is used to build a secure monitoring system. The trusted execution environment includes an execution environment module, a design security architecture, a development trusted monitoring module and an information system deployment architecture module, which are used to enhance the protection of monitoring data and ensure the security of the computer system; the execution environment is the core component of the trusted execution environment module technology; the design security architecture is used to ensure the security and integrity of the data and ensure that the monitoring data is protected during transmission and storage. Encryption algorithms and security protocols can be used to protect the transmission of data, while digital signatures and hash algorithms can be used to ensure the integrity of the data; the development of a trusted monitoring module is used to collect and process monitoring data, and the module should be protected by the execution environment to prevent malware and attackers from tampering with or interfering with it.

[0011] Preferably, the trusted software technology module includes a software security verification module, a software vulnerability analysis module, a software prediction module and a software credibility assessment module;

[0012] Preferably, the software security verification module is used to perform strict security verification on the software system to ensure that the software can maintain its security and integrity when facing various attacks; the software vulnerability analysis module is used to perform comprehensive vulnerability analysis on the software system through vulnerability scanning, fuzz testing and other technical means, discover potential security risks, and take corresponding preventive measures to improve the security of the software.

[0013] Preferably, the trusted hardware technology module, the core of the trusted hardware technology module is a hardware security module, which is a hardware device for protecting sensitive data and keys. The hardware security module ensures the integrity and security of the hardware by providing secure storage, processing and verification functions.

[0014] Preferably, the application software loading and execution control system also includes the addition of new technologies such as artificial intelligence and blockchain, which together assist in the use of trusted computing technology modules. By introducing artificial intelligence technology, intelligent monitoring of the software system can be achieved, and adaptive protection can be achieved by introducing blockchain technology to achieve decentralization, transparency and immutability of the software system, thereby further improving the credibility of the software.

[0015] Preferably, the information system deployment architecture module, the information system deployment architecture types include: single-layer architecture: all modules are deployed on the same server, which is simple but not stable and secure enough; two-layer architecture: the front-end and the back-end are separated, the front-end is responsible for displaying the interface, and the back-end processes business logic and data storage; three-layer architecture: the front-end, business logic and data storage are separated to improve the scalability and maintainability of the system; microservice architecture: the system is split into multiple small services, each service is deployed independently, which is easy to manage and maintain.

[0016] Preferably, the software prediction module is used to evaluate and predict the reliability of the software system through reliability modeling, fault prediction and other means to ensure that the software can still run stably in a complex and changing environment.

[0017] Preferably, the software credibility assessment module is used to quantify and assess the credibility of the software system by establishing a complete credibility measurement and assessment system, thereby providing strong support for software development, deployment and maintenance.

[0018] Preferably, the hardware security module includes a secure boot module, a secure storage module and a secure communication module. The hardware security module is used in coordination with the trusted software technology module to further enhance the security of the system.

[0019] Preferably, the blockchain includes an encryption algorithm, which is used to protect data information on the blockchain. These algorithms include hash functions, signature algorithms and symmetric key encryption, which are used to prevent the leakage of information data in the application software loading execution control system and improve the confidentiality and security of the system.

[0020] Preferably, the system also includes a server and a mobile terminal, which controls the target software control system to perform a control algorithm determination unit on the target power electronic device, which is used to determine the target control algorithm corresponding to the target power electronic device, and is used to adjust the initial control software process according to the target control algorithm to obtain the target control software process, and the system determination unit is used to modify the initial software control system according to the target control software process to obtain the target software control system.

[0021] Compared with the prior art, the present invention has the following beneficial effects:

[0022] 1. The system information computing technology of the present invention is a method for ensuring the security and credibility of the computing platform. It can provide additional security for the monitoring system to build a secure monitoring system. The present invention covers the steps of selecting TEE, designing security architecture, developing monitoring modules and deploying and configuring the system. By implementing these measures, the protection of monitoring data and application software can be enhanced, the security of the computer application software control system can be ensured, the security of the computing platform can be protected through the collaborative work of hardware and software, and the security of the entire application software loading and execution control system can be improved.

[0023] 2. The core technology of the present invention involves multiple aspects, including hardware security module, trusted software base, trusted network connection, trusted computing platform and trusted computing environment. These technologies together constitute the basic architecture of trusted computing, providing solid guarantee for the safe and stable operation of software loading and execution control system. Through the synergy of these modules, a complete security guarantee system is formed, which provides solid support for the safe and stable operation of the system.

[0024] 3. The present invention introduces new technologies such as artificial intelligence and blockchain to assist in the use of trusted software technology. By introducing artificial intelligence technology, intelligent monitoring of the software system and adaptive protection can be achieved. By introducing blockchain technology, the decentralization, transparency and non-tamperability of the software system can be achieved, further improving the credibility of the software, providing a more solid guarantee for the security, reliability and credibility of the application software loading and execution control system, and improving the stability of the entire system. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 This is an overall structural diagram of an application software loading and execution control system based on trusted computing technology provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0026] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0027] like Figure 1 As shown, the application software loading and execution control system based on trusted computing technology includes: a data collection and monitoring module, a trusted computing technology module, a control center module, an early warning module and a processor; the data collection and monitoring module, the trusted computing technology module, the control center module and the early warning module are electrically connected to the processor;

[0028] Trusted computing technology module, including trusted execution environment module, trusted software technology module and trusted hardware technology module. The trusted computing technology module is used to form the basic architecture of trusted computing, providing a solid guarantee for the safe and stable operation of the application software loading and execution system;

[0029] Trusted execution environment module, to build a secure monitoring system, the trusted execution environment includes execution environment module, design security architecture, development of trusted monitoring module and information system deployment architecture module, which is used to enhance the protection of monitoring data and ensure the security of computer system; execution environment, which is the core component of trusted execution environment module technology; design security architecture, used to ensure the security and integrity of data, to ensure that monitoring data is protected during transmission and storage. Encryption algorithms and security protocols can be used to protect data transmission, while digital signatures and hash algorithms can be used to ensure data integrity; develop a trusted monitoring module for collecting and processing monitoring data, which should be protected by the execution environment to prevent malware and attackers from tampering with or interfering with it.

[0030] Trusted software technology module, including software security verification module, software vulnerability analysis module, software prediction module and software credibility assessment module;

[0031] The software security verification module is used to perform strict security verification on the software system to ensure that the software can maintain its security and integrity when facing various attacks; the software vulnerability analysis module is used to perform comprehensive vulnerability analysis on the software system through vulnerability scanning, fuzz testing and other technical means, discover potential security risks, and take corresponding preventive measures to improve the security of the software.

[0032] Trusted hardware technology module. The core of the trusted hardware technology module is the hardware security module, which is a hardware device used to protect sensitive data and keys. The hardware security module ensures the integrity and security of the hardware by providing secure storage, processing and verification functions.

[0033] The application software loading and execution control system also includes the addition of new technologies such as artificial intelligence and blockchain, which work together to assist in the use of trusted computing technology modules. By introducing artificial intelligence technology, intelligent monitoring of the software system can be achieved, as well as adaptive protection. By introducing blockchain technology, the decentralization, transparency and immutability of the software system can be achieved, further improving the credibility of the software.

[0034] Information system deployment architecture module. Information system deployment architecture types include:

[0035] Single-tier architecture: All modules are deployed on the same server, which is simple but not stable and secure enough; Two-tier architecture: The front-end and back-end are separated, the front-end is responsible for displaying the interface, and the back-end handles business logic and data storage; Three-tier architecture: The front-end, business logic, and data storage are separated to improve the scalability and maintainability of the system; Microservice architecture: The system is split into multiple small services, each of which is deployed independently for easy management and maintenance.

[0036] The software prediction module is used to evaluate and predict the reliability of the software system through reliability modeling, fault prediction and other means to ensure that the software can still run stably in a complex and changing environment.

[0037] The software credibility assessment module, by establishing a complete credibility measurement and assessment system, is used to quantify and evaluate the credibility of the software system, providing strong support for software development, deployment and maintenance.

[0038] The hardware security module includes a secure boot module, a secure storage module and a secure communication module. The hardware security module works together with the trusted software technology module to further enhance the security of the system.

[0039] The blockchain includes encryption algorithms, which are used to protect data information on the blockchain. These algorithms include hash functions, signature algorithms and symmetric key encryption, which are used to prevent the leakage of information data in the application software loading and execution control system, and improve the confidentiality and security of the system.

[0040] The system also includes a server and a mobile terminal, and a control algorithm determination unit for controlling the target software control system to perform control on the target power electronic device, which is used to determine the target control algorithm corresponding to the target power electronic device, and is used to adjust the initial control software process according to the target control algorithm to obtain the target control software process. The system determination unit is used to modify the initial software control system according to the target control software process to obtain the target software control system.

[0041] In summary, the present invention is based on the application software loading and execution control system of the trusted computing technology: the system trusted computing technology of the present invention is a method for ensuring the security and credibility of the computing platform, which can provide additional security for the monitoring system to build a secure monitoring system. The present invention covers the steps of selecting TEE, designing security architecture, developing monitoring modules and deploying and configuring the system. By implementing these measures, the protection of monitoring data and application software can be enhanced, the security of the computer application software control system can be ensured, the security of the computing platform can be protected through the collaborative work of hardware and software, and the security of the entire application software loading and execution control system can be improved;

[0042] The core technology of the present invention involves multiple aspects, including hardware security module, trusted software base, trusted network connection, trusted computing platform and trusted computing environment. These technologies together constitute the basic architecture of trusted computing, providing a solid guarantee for the safe and stable operation of the software loading and execution control system. Through the synergy of these modules, a complete security guarantee system is formed, providing a solid support for the safe and stable operation of the system.

[0043] The present invention introduces new technologies such as artificial intelligence and blockchain to assist in the use of trusted software technology. By introducing artificial intelligence technology, intelligent monitoring of the software system and adaptive protection can be achieved. By introducing blockchain technology, the decentralization, transparency and non-tamperability of the software system can be achieved, further improving the credibility of the software, providing a more solid guarantee for the security, reliability and credibility of the application software loading and execution control system, and improving the stability of the entire system.

[0044] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0045] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

[0046] The above describes in detail the optional implementation modes of the embodiments of the present invention in combination with the accompanying drawings, but the embodiments of the present invention are not limited to the specific details in the above implementation modes. Within the technical concept of the embodiments of the present invention, a variety of simple modifications can be made to the technical scheme of the embodiments of the present invention, and these simple modifications all belong to the protection scope of the embodiments of the present invention.

Claims

1. An application software loading and execution control system based on trusted computing technology, characterized in that: include: Collection and monitoring data module, trusted computing technology module, control center module, early warning module and processor; The monitoring data collection module, the trusted computing technology module, the control center module and the early warning module are electrically connected to the processor; The trusted computing technology module includes a trusted execution environment module, a trusted software technology module and a trusted hardware technology module. The trusted computing technology modules are used to jointly constitute the basic architecture of trusted computing, providing a solid guarantee for the safe and stable operation of the application software loading and execution system; The trusted execution environment module is used to build a secure monitoring system. The trusted execution environment includes an execution environment module, a design security architecture, a development trusted monitoring module and an information system deployment architecture module, which are used to enhance the protection of monitoring data and ensure the security of the computer system; the execution environment is the core component of the trusted execution environment module technology; The security architecture is designed to ensure the security and integrity of data and to ensure that monitoring data is protected during transmission and storage. Encryption algorithms and security protocols can be used to protect data transmission, while digital signatures and hash algorithms can be used to ensure data integrity. The development of a trusted monitoring module for collecting and processing monitoring data should be protected by the execution environment to prevent malware and attackers from tampering with or interfering with it; The trusted software technology module includes a software security verification module, a software vulnerability analysis module, a software prediction module and a software credibility assessment module; The software security verification module is used to perform strict security verification on the software system to ensure that the software can maintain its security and integrity when facing various attacks; the software vulnerability analysis module is used to perform comprehensive vulnerability analysis on the software system through vulnerability scanning, fuzz testing and other technical means, discover potential security risks, and take corresponding preventive measures to improve the security of the software; The trusted hardware technology module, the core of which is the hardware security module, which is a hardware device used to protect sensitive data and keys. The hardware security module ensures the integrity and security of the hardware by providing secure storage, processing and verification functions; The application software loading and execution control system also includes the addition of new technologies such as artificial intelligence and blockchain, which work together to assist in the use of trusted computing technology modules. By introducing artificial intelligence technology, intelligent monitoring of the software system can be achieved, as well as adaptive protection. By introducing blockchain technology, the decentralization, transparency and immutability of the software system can be achieved, further improving the credibility of the software.

2. The application software loading and execution control system based on trusted computing technology according to claim 1, characterized in that: The information system deployment architecture module, the information system deployment architecture types include: single-layer architecture: all modules are deployed on the same server, which is simple but not stable and secure enough; two-layer architecture: the front-end and the back-end are separated, the front-end is responsible for displaying the interface, and the back-end processes business logic and data storage; three-layer architecture: the front-end, business logic and data storage are separated to improve the scalability and maintainability of the system; microservice architecture: the system is split into multiple small services, each service is deployed independently for easy management and maintenance.

3. The application software loading and execution control system based on trusted computing technology according to claim 2, characterized in that: The software prediction module is used to evaluate and predict the reliability of the software system through reliability modeling, fault prediction and other means to ensure that the software can still run stably in a complex and changing environment.

4. The application software loading and execution control system based on trusted computing technology according to claim 3 is characterized in that: The software credibility assessment module is used to quantify and assess the credibility of the software system by establishing a complete credibility measurement and assessment system, providing strong support for software development, deployment and maintenance.

5. The application software loading and execution control system based on trusted computing technology according to claim 4, characterized in that: The hardware security module includes a secure boot module, a secure storage module and a secure communication module. The hardware security module is used in conjunction with the trusted software technology module to further enhance the security of the system.

6. The application software loading and execution control system based on trusted computing technology according to claim 5, characterized in that: The blockchain includes an encryption algorithm, which is used to protect data information on the blockchain. The algorithm includes a hash function, a signature algorithm and symmetric key encryption, which is used to prevent the leakage of information data in the application software loading execution control system and improve the confidentiality and security of the system.

7. The application software loading and execution control system based on trusted computing technology according to claim 6, characterized in that: The system also includes a server and a mobile terminal, and controls the target software control system to perform a control algorithm determination unit on the target power electronic device, which is used to determine the target control algorithm corresponding to the target power electronic device, and is used to adjust the initial control software process according to the target control algorithm to obtain the target control software process. The system determination unit is used to modify the initial software control system according to the target control software process to obtain the target software control system.

Images