Autonomous controllable operating system security enhancement method and system oriented to electric power scene

Abstract

The invention relates to a power scene-oriented autonomous controllable operating system security enhancement method, which comprises the following steps of: S1, integrating a special power encryption chip in power acquisition control equipment, and hierarchically designing a credible security protection strategy according to functions and importance of the equipment; s2, constructing a dual-system architecture of an application layer and a system kernel layer of the swan operating system, and respectively applying a lightweight security protocol to perform interactive protection; s3, defining each node of the multi-type trust chain and a transmission mechanism thereof, analyzing possible trust loss conditions in different trust nodes, and combining static trust with dynamic trust to form a mixed trust chain mechanism; and S4, performing static measurement during boot loading by using an encryption chip, ensuring the integrity of a starting environment, and during running, detecting an anomaly and triggering a protection mechanism by monitoring and verifying behaviors of applications and processes in real time. According to the method, various security threats can be more effectively resisted, and the safe and stable operation of the key infrastructure is guaranteed.

Description

Technical Field

[0001] The present invention relates to the field of system security enhancement, and in particular to a method and system for enhancing the security of an autonomous and controllable operating system for power scenarios. Background Art

[0002] In modern power systems, with the widespread application of Internet of Things (IoT) devices and the development of smart grids, the security requirements for power acquisition and control equipment have become increasingly urgent. As a critical infrastructure, the security of power systems has a vital impact on the stable operation of the social economy. However, since these devices are often distributed over a wide geographical area and communicate with standard protocols on the Internet, the risk of cyber attacks they face is also increasing.

[0003] Traditional security measures usually focus on software-level protection, while ignoring how the hardware layer and system architecture design can jointly improve the overall security protection level. As attackers' technical level improves, a single-level security mechanism is no longer sufficient to fully protect the security of the system. Summary of the invention

[0004] In order to solve the above problems, the purpose of the present invention is to provide a method and system for enhancing the security of an autonomous and controllable operating system for power scenarios, which can significantly improve the overall security of the autonomous and controllable operating system in power scenarios, especially in a distributed network environment, and ensure the efficient, reliable and safe operation of the system.

[0005] To achieve the above object, the present invention adopts the following technical solutions:

[0006] A method for enhancing the security of an autonomous and controllable operating system for power scenarios includes the following steps:

[0007] Step S1: Integrate a dedicated power encryption chip in the power collection and control device, and design a trusted security protection strategy in layers according to the function and importance of the device. Use the trust support provided by the encryption chip to perform link protection and information verification between each layer to ensure data security between different layers;

[0008] Step S2: construct a dual architecture of the application layer and the system kernel layer of the Hongmeng operating system, and apply lightweight security protocols for interactive protection respectively, optimizing resource consumption without reducing security;

[0009] Step S3: define each node of the multi-modal trust chain and its transmission mechanism, analyze the possible trust loss in different trust nodes, and establish a hybrid trust chain mechanism that combines static trust with dynamic trust;

[0010] Step S4: Use the encryption chip to perform static measurements during boot loading to ensure the integrity of the startup environment. During runtime, detect anomalies and trigger protection mechanisms by real-time monitoring and verification of the behavior of applications and processes.

[0011] Furthermore, step S1 is specifically as follows:

[0012] Integrate a dedicated power encryption chip in the power collection and control equipment. The encryption chip supports AES, RSA, and ECC encryption algorithms. Configure the chip to support encryption / decryption, signature verification, and key management functions.

[0013] Based on function and importance, the device is divided into control layer, communication layer and data processing layer; the control layer is responsible for the basic operation and command execution of the device, uses encryption chips to verify the signatures of all control instructions to prevent unauthorized modification, and adopts hardware key storage to prevent key leakage; the communication layer handles external data exchange and access, uses hardware encryption chips to encrypt data transmission to prevent eavesdropping and man-in-the-middle attacks, implements TLS / DTLS protocols, and accelerates the negotiation and encryption and decryption process through chips; the data processing layer is used to analyze and process the collected data, verify the integrity of all input data, use the hash function provided by the chip to detect tampering, encrypt and store historical and real-time data to prevent unauthorized access;

[0014] Utilize the trusted platform module supported by the encryption chip to establish a trust chain when the device starts up, ensuring that the startup code and configuration go from a trusted state to a running state. In the interaction between various layers, digital signatures and checksums are used to ensure the authenticity and integrity of the information. All data packets sent and received must be processed by the chip's verification module to build a trusted system operating environment.

[0015] Furthermore, step S2 is specifically as follows:

[0016] The dual system architecture includes an application layer and a system kernel layer;

[0017] The application layer runs user applications, interacts with users and peripherals, and implements lightweight container isolation to ensure that applications do not interfere with each other;

[0018] The system kernel layer uses the microkernel architecture of Hongmeng OS to improve system security and stability. The kernel layer is responsible for resource management and provision of basic services.

[0019] Implement the lightweight transport protocol DTLS-lite to provide a reliable encrypted channel between applications, adopt a fine-grained permission management mechanism, and improve security through dynamic authorization between applications;

[0020] Use lightweight kernel module communication protocols to ensure communication security between modules; configure identity-based access control (IBAC) to restrict access to kernel services;

[0021] Well-defined security interfaces between applications and the kernel to ensure secure access to system resources;

[0022] Adopt intelligent resource scheduling algorithm oriented to application performance to dynamically adjust system resource allocation;

[0023] Through incremental updates and efficient memory management technology, the use of memory resources is optimized to avoid heavy garbage collection affecting performance.

[0024] Furthermore, we optimize the use of memory resources through incremental updates and efficient memory management techniques to avoid heavy garbage collection affecting performance, as follows:

[0025] Using differential update technology, only the changed parts in memory or storage are updated, reducing the overall storage write and memory copy volume. For large files and data sets, a segmented update mechanism is used to ensure efficiency.

[0026] Implement generational garbage collection strategy, divide memory into different generations, and process data of different life cycles separately; use parallel and concurrent garbage collection algorithms to reduce pause time;

[0027] Introducing a memory pool management mechanism to manage short-term memory applications in a pooled manner and reduce system overhead;

[0028] Use pre-allocation technology to pre-allocate a certain amount of memory to commonly used objects or applications to improve memory allocation efficiency; integrate memory analysis tools to monitor memory leaks, dynamically release unused memory, and perform code analysis through static and dynamic tools to identify potential memory leak problems.

[0029] Furthermore, an intelligent resource scheduling algorithm oriented to application performance is used to dynamically adjust system resource allocation, as follows:

[0030] Assign different priorities to applications and dynamically adjust their priorities by continuously monitoring application performance requirements and usage;

[0031] Use machine learning algorithms to analyze historical operation data, predict application performance requirements, and adjust resource allocation based on the prediction results; adjust scheduling strategies in real time to adapt to changing workloads;

[0032] Implement feedback control, input the real-time performance feedback of the application into the scheduling module, and dynamically adjust resource allocation; set performance indicators, including response time and throughput, as goals, adjust resource allocation through feedback, and improve the real-time performance of the application;

[0033] Use the CGroups mechanism to define resource quotas at the application level to control resource usage and prevent a particular application from causing a drop in overall system performance due to abnormal load.

[0034] Furthermore, we define the nodes of the multi-modal trust chain and their transmission mechanism, and analyze the possible trust loss in different trust nodes, as follows:

[0035] The nodes include:

[0036] Hardware root trust node: Using the trusted platform module TPM, the hardware root trust node constitutes the starting point of the trust chain to ensure the integrity and security of the system when it starts;

[0037] Boot Loader node: During system startup, the Boot Loader must verify the hardware root trust node managed by the TPM;

[0038] Operating system kernel node: After booting, the kernel needs to verify the integrity of the Boot Loader and continuously monitor the security of the kernel module;

[0039] System service node: used to verify the integrity of core system services or applications, ensuring that only verified modules are allowed to run;

[0040] Application nodes: Real-time dynamic measurement during execution to ensure the integrity and trustworthiness of the application;

[0041] Use the native TPM function to transfer trust, starting from the hardware root of trust at startup, and gradually transferring it to the BootLoader, kernel, and application layer;

[0042] Through digital signature and hash verification mechanisms, effective trust certificate exchange and verification are carried out between each node. Hardware component failure or external influence may cause root trust failure, such as TPM chip damage. After the Boot Loader, kernel or system service is updated, new vulnerabilities may be introduced or the trust chain may be interrupted.

[0043] Furthermore, the hybrid trust chain mechanism is as follows:

[0044] Combining static and dynamic trust, static trust measures: TPM and hardware-based encryption create an unchangeable trust starting point at boot time; use integrity verification measures to ensure that only verified code can run;

[0045] Dynamic Trust Measures: Implement runtime measurement strategies to dynamically monitor the behavior of applications and services. Use anomaly detection and behavioral analysis tools to identify potential threats based on daily operating patterns.

[0046] Combining hardware encryption signature technology with a dynamic assessment mechanism ensures that the trust chain is seamlessly connected between startup and operation, and implements graded assessment. Low-risk operations can use dynamic trust, while high-risk or critical operations require complete static trust verification.

[0047] A security enhancement system for an autonomous and controllable operating system for electric power scenarios includes a processor, a memory, and a computer program stored in the memory. When the processor executes the computer program, it specifically performs the steps in the security enhancement method for an autonomous and controllable operating system for electric power scenarios as described above.

[0048] The present invention has the following beneficial effects:

[0049] 1. The present invention uses an integrated hardware and software combination strategy, as well as the integration of static and dynamic trust, to strengthen core security capabilities while taking into account system performance, so that power acquisition and control equipment can more effectively resist various security threats and ensure the safe and stable operation of key infrastructure;

[0050] 2. The present invention divides the system into layers according to its functions and importance, ensuring that each layer is protected accordingly. This method increases the difficulty for attackers to enter the system, making the trust chain protection and information verification between layers more stable. It also uses the separation structure of Hongmeng's application layer and kernel layer to optimize resource consumption through lightweight security protocols, providing the necessary security protection and ensuring the performance and efficiency of the system. This allows complex security operations to be run with limited system resources;

[0051] 3. The present invention combines static and dynamic trust to form a trust chain, improves the system's adaptability to dynamic changes, and reduces the risk of trust loss. This mechanism makes the system more flexible and robust when dealing with diverse attacks. Static measurements are performed when the system starts to ensure the integrity of the code and environment, while dynamic monitoring is performed during operation. Through this real-time monitoring and verification, abnormal behavior can be detected and responded to in a timely manner, effectively reducing the harm of potential attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 The figure is a flow chart of the method of the present invention. DETAILED DESCRIPTION

[0053] The present invention is further described in detail below with reference to the accompanying drawings and specific embodiments:

[0054] refer to Figure 1 In this embodiment, a method for enhancing the security of an autonomous and controllable operating system for a power scenario is provided, comprising the following steps:

[0055] Step S1: Integrate a dedicated power encryption chip in the power collection and control device, and design a trusted security protection strategy in layers according to the function and importance of the device. Use the trust support provided by the encryption chip to perform link protection and information verification between each layer to ensure data security between different layers;

[0056] Step S2: construct a dual architecture of the application layer and the system kernel layer of the Hongmeng operating system, and apply lightweight security protocols for interactive protection respectively, optimizing resource consumption without reducing security;

[0057] Step S3: define each node of the multi-modal trust chain and its transmission mechanism, analyze the possible trust loss in different trust nodes, and establish a hybrid trust chain mechanism that combines static trust (such as hardware root trust) with dynamic trust (such as runtime measurement);

[0058] Step S4: Use the encryption chip to perform static measurements during boot loading to ensure the integrity of the startup environment. During runtime, detect anomalies and trigger protection mechanisms by real-time monitoring and verification of the behavior of applications and processes.

[0059] In this embodiment, step S1 is specifically as follows:

[0060] Integrate a dedicated power encryption chip in the power collection and control equipment. The encryption chip supports AES, RSA, and ECC encryption algorithms. Configure the chip to support encryption / decryption, signature verification, and key management functions.

[0061] Based on function and importance, the device is divided into control layer, communication layer and data processing layer; the control layer is responsible for the basic operation and command execution of the device, uses encryption chips to verify the signatures of all control instructions to prevent unauthorized modification, and adopts hardware key storage to prevent key leakage; the communication layer handles external data exchange and access, uses hardware encryption chips to encrypt data transmission to prevent eavesdropping and man-in-the-middle attacks, implements TLS / DTLS protocols, and accelerates the negotiation and encryption and decryption process through chips; the data processing layer is used to analyze and process the collected data, verify the integrity of all input data, use the hash function provided by the chip to detect tampering, encrypt and store historical and real-time data to prevent unauthorized access;

[0062] Utilize the trusted platform module supported by the encryption chip to establish a trust chain when the device starts up, ensuring that the startup code and configuration go from a trusted state to a running state. In the interaction between various layers, digital signatures and checksums are used to ensure the authenticity and integrity of the information. All data packets sent and received must be processed by the chip's verification module to build a trusted system operating environment.

[0063] In this embodiment, step S2 is specifically as follows:

[0064] The dual system architecture includes an application layer and a system kernel layer;

[0065] The application layer runs user applications, interacts with users and peripherals, and implements lightweight container isolation to ensure that applications do not interfere with each other;

[0066] The system kernel layer uses the microkernel architecture of Hongmeng OS to improve system security and stability. The kernel layer is responsible for resource management and provision of basic services.

[0067] Implement the lightweight transport protocol DTLS-lite to provide a reliable encrypted channel between applications, adopt a fine-grained permission management mechanism, and improve security through dynamic authorization between applications;

[0068] Use lightweight kernel module communication protocols to ensure communication security between modules; configure identity-based access control (IBAC) to restrict access to kernel services;

[0069] Well-defined security interfaces between applications and the kernel to ensure secure access to system resources;

[0070] Adopt intelligent resource scheduling algorithm oriented to application performance to dynamically adjust system resource allocation;

[0071] Through incremental updates and efficient memory management technology, the use of memory resources is optimized to avoid heavy garbage collection affecting performance.

[0072] In this embodiment, incremental updates and efficient memory management techniques are used to optimize the use of memory resources and avoid heavy garbage collection affecting performance, as follows:

[0073] Using differential update technology, only the changed parts in memory or storage are updated, reducing the overall storage write and memory copy volume. For large files and data sets, a segmented update mechanism is used to ensure efficiency.

[0074] Implement a generational garbage collection strategy to divide the memory into different generations (new generation and old generation), and process data of different life cycles separately; use parallel and concurrent garbage collection algorithms (such as G1, ZGC) to reduce pause time;

[0075] Introducing a memory pool management mechanism to manage short-term memory applications (such as cache) in a pooled manner to reduce system overhead;

[0076] Use pre-allocation technology to pre-allocate a certain amount of memory to commonly used objects or applications to improve memory allocation efficiency; integrate memory analysis tools to monitor memory leaks, dynamically release unused memory, and perform code analysis through static and dynamic tools to identify potential memory leak problems.

[0077] In this embodiment, an intelligent resource scheduling algorithm oriented to application performance is adopted to dynamically adjust system resource allocation, as follows:

[0078] Assign different priorities to applications and dynamically adjust their priorities by continuously monitoring application performance requirements and usage. High-priority applications can get priority access to key resources such as CPU, memory, and I / O when resources are tight.

[0079] Use machine learning algorithms to analyze historical operation data, predict application performance requirements, and adjust resource allocation based on the prediction results; adjust scheduling strategies in real time to adapt to changing workloads;

[0080] Implement feedback control, input the real-time performance feedback of the application into the scheduling module, and dynamically adjust resource allocation; set performance indicators, including response time and throughput, as goals, adjust resource allocation through feedback, and improve the real-time performance of the application;

[0081] Use the CGroups mechanism to define resource quotas at the application level to control resource usage and prevent a particular application from causing a drop in overall system performance due to abnormal load (such as falling into an infinite loop).

[0082] In this embodiment, each node of the multi-modal trust chain and its transmission mechanism are defined, and possible trust loss situations in different trust nodes are analyzed, as follows:

[0083] The nodes include:

[0084] Hardware root trust node: Using the trusted platform module TPM, the hardware root trust node constitutes the starting point of the trust chain to ensure the integrity and security of the system when it starts;

[0085] Boot Loader node: During system startup, the Boot Loader must verify the hardware root trust node managed by the TPM;

[0086] Operating system kernel node: After booting, the kernel needs to verify the integrity of the Boot Loader and continuously monitor the security of the kernel module;

[0087] System service node: used to verify the integrity of core system services or applications, ensuring that only verified modules are allowed to run;

[0088] Application nodes: Real-time dynamic measurement during execution to ensure the integrity and trustworthiness of the application;

[0089] Use the native TPM function to transfer trust, starting from the hardware root of trust at startup, and gradually transferring it to the BootLoader, kernel, and application layer;

[0090] Through digital signature and hash (such as SHA-256) verification mechanism, effective trust certificate exchange and verification are carried out between each node; hardware component failure or external influence may cause root trust failure, such as TPM chip damage; after the BootLoader, kernel or system service is updated, new vulnerabilities may be introduced or the trust chain may be interrupted.

[0091] In this embodiment, the hybrid trust chain mechanism is as follows:

[0092] Combining static and dynamic trust, static trust measures: TPM and hardware-based encryption create an unchangeable trust starting point at boot time; use integrity verification measures (such as secure boot) to ensure that only verified code can run;

[0093] Dynamic Trust Measures: Implement runtime measurement strategies to dynamically monitor the behavior of applications and services. Use anomaly detection and behavioral analysis tools to identify potential threats based on daily operating patterns.

[0094] Combining hardware encryption signature technology with a dynamic assessment mechanism ensures that the trust chain is seamlessly connected between startup and operation, and implements graded assessment. Low-risk operations can use dynamic trust, while high-risk or critical operations require complete static trust verification.

[0095] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0096] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0097] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0098] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0099] The above is only a preferred embodiment of the present invention, and does not limit the present invention in other forms. Any technician familiar with the profession may use the above disclosed technical content to change or modify it into an equivalent embodiment with equivalent changes. However, any simple modification, equivalent change and modification made to the above embodiment according to the technical essence of the present invention without departing from the technical solution of the present invention still belongs to the protection scope of the technical solution of the present invention.

Claims

1. A method for enhancing the security of an autonomous and controllable operating system for power scenarios, characterized in that: The following steps are involved: Step S1: Integrate a dedicated power encryption chip in the power collection and control device, and design a trusted security protection strategy in layers according to the function and importance of the device. Use the trust support provided by the encryption chip to perform link protection and information verification between each layer to ensure data security between different layers; Step S2: construct a dual architecture of the application layer and the system kernel layer of the Hongmeng operating system, and apply lightweight security protocols for interactive protection respectively, optimizing resource consumption without reducing security; Step S3: define each node of the multi-modal trust chain and its transmission mechanism, analyze the possible trust loss in different trust nodes, and establish a hybrid trust chain mechanism that combines static trust with dynamic trust; Step S4: Use the encryption chip to perform static measurements during boot loading to ensure the integrity of the startup environment. During runtime, detect anomalies and trigger protection mechanisms by real-time monitoring and verification of the behavior of applications and processes.

2. According to claim 1, a method for enhancing the security of an autonomous and controllable operating system for power scenarios is characterized in that: The step S1 is specifically as follows: Integrate a dedicated power encryption chip in the power collection and control equipment. The encryption chip supports AES, RSA, and ECC encryption algorithms. Configure the chip to support encryption / decryption, signature verification, and key management functions. Based on function and importance, the device is divided into control layer, communication layer and data processing layer; the control layer is responsible for the basic operation and command execution of the device, uses encryption chips to verify the signatures of all control instructions to prevent unauthorized modification, and adopts hardware key storage to prevent key leakage; the communication layer handles external data exchange and access, uses hardware encryption chips to encrypt data transmission to prevent eavesdropping and man-in-the-middle attacks, implements TLS / DTLS protocols, and accelerates the negotiation and encryption and decryption process through chips; the data processing layer is used to analyze and process the collected data, verify the integrity of all input data, use the hash function provided by the chip to detect tampering, encrypt and store historical and real-time data to prevent unauthorized access; Utilize the trusted platform module supported by the encryption chip to establish a trust chain when the device starts up, ensuring that the startup code and configuration go from a trusted state to a running state. In the interaction between various layers, digital signatures and checksums are used to ensure the authenticity and integrity of the information. All data packets sent and received must be processed by the chip's verification module to build a trusted system operating environment.

3. According to claim 1, a method for enhancing the security of an autonomous and controllable operating system for power scenarios is characterized in that: The step S2 is specifically as follows: The dual system architecture includes an application layer and a system kernel layer; The application layer runs user applications, interacts with users and peripherals, and implements lightweight container isolation to ensure that applications do not interfere with each other; The system kernel layer uses the microkernel architecture of Hongmeng OS to improve system security and stability; The kernel layer is responsible for resource management and provision of basic services; Implement the lightweight transport protocol DTLS-lite to provide a reliable encrypted channel between applications, adopt a fine-grained permission management mechanism, and improve security through dynamic authorization between applications; Use lightweight kernel module communication protocols to ensure communication security between modules; configure identity-based access control (IBAC) to restrict access to kernel services; Well-defined security interfaces between applications and the kernel to ensure secure access to system resources; Adopt intelligent resource scheduling algorithm oriented to application performance to dynamically adjust system resource allocation; Through incremental updates and efficient memory management technology, the use of memory resources is optimized to avoid heavy garbage collection affecting performance.

4. According to claim 3, a method for enhancing the security of an autonomous and controllable operating system for power scenarios is characterized in that: The incremental update and efficient memory management technology are used to optimize the use of memory resources and avoid heavy garbage collection affecting performance, as follows: Using differential update technology, only the changed parts in memory or storage are updated, reducing the overall storage write and memory copy volume. For large files and data sets, a segmented update mechanism is used to ensure efficiency. Implement a generational garbage collection strategy to divide the memory into different generations and process data of different life cycles separately; Use parallel and concurrent garbage collection algorithms to reduce pause times; Introduced a memory pool management mechanism to manage short-term memory applications in a pooled manner, reducing system overhead; Use pre-allocation technology to pre-allocate a certain amount of memory to commonly used objects or applications to improve memory allocation efficiency; Integrated memory analysis tools monitor memory leaks, dynamically release unused memory, and perform code analysis through static and dynamic tools to identify potential memory leak issues.

5. According to claim 1, a method for enhancing the security of an autonomous and controllable operating system for power scenarios is characterized in that: The intelligent resource scheduling algorithm oriented to application performance is used to dynamically adjust system resource allocation, as follows: Assign different priorities to applications and dynamically adjust their priorities by continuously monitoring application performance requirements and usage; Use machine learning algorithms to analyze historical operation data, predict application performance requirements, and adjust resource allocation based on the prediction results; adjust scheduling strategies in real time to adapt to changing workloads; Implement feedback control to input the real-time performance feedback of the application into the scheduling module to dynamically adjust resource allocation; Set performance indicators, including response time and throughput, as goals, and adjust resource allocation through feedback to improve the real-time performance of applications; Use the CGroups mechanism to define resource quotas at the application level to control resource usage and prevent a particular application from causing a drop in overall system performance due to abnormal load.

6. According to claim 1, a method for enhancing the security of an autonomous and controllable operating system for power scenarios is characterized in that: The nodes and transmission mechanisms of the multi-modal trust chain are defined, and the possible trust loss situations in different trust nodes are analyzed, as follows: The nodes include: Hardware root trust node: Using the trusted platform module TPM, the hardware root trust node constitutes the starting point of the trust chain to ensure the integrity and security of the system when it starts; Boot Loader node: During system startup, the Boot Loader must verify the hardware root trust node managed by the TPM; Operating system kernel node: After booting, the kernel needs to verify the integrity of the Boot Loader and continuously monitor the security of the kernel module; System service node: used to verify the integrity of core system services or applications, ensuring that only verified modules are allowed to run; Application nodes: Real-time dynamic measurement during execution to ensure the integrity and trustworthiness of the application; Use the native TPM function to transfer trust, starting from the hardware root of trust at startup, and gradually transferring it to the BootLoader, kernel, and application layer; Through digital signature and hash verification mechanisms, effective trust certificate exchange and verification are carried out between each node. Hardware component failure or external influence may cause root trust failure, such as TPM chip damage. After the Boot Loader, kernel or system service is updated, new vulnerabilities may be introduced or the trust chain may be interrupted.

7. The method for enhancing the security of an autonomous and controllable operating system for power scenarios according to claim 6 is characterized in that: The hybrid trust chain mechanism is as follows: Combining static and dynamic trust, static trust measures: TPM and hardware-based encryption create an unchangeable trust starting point at boot time; use integrity verification measures to ensure that only verified code can run; Dynamic Trust Measures: Implement runtime measurement strategies to dynamically monitor the behavior of applications and services. Use anomaly detection and behavioral analysis tools to identify potential threats based on daily operating patterns. Combining hardware encryption signature technology with dynamic assessment mechanism, we ensure that the trust chain is seamlessly connected between startup and operation, and implement hierarchical assessment. Low-risk operations can use dynamic trust, while high-risk or critical operations require complete static trust verification.

8. An autonomous and controllable operating system security enhancement system for power scenarios, characterized in that: It includes a processor, a memory and a computer program stored in the memory. When the processor executes the computer program, it specifically performs the steps in the security enhancement method of an autonomous and controllable operating system for power scenarios as described in any one of claims 1 to 7.

Images