23 results about "Trusted components" patented technology

The invention provides a property management platform based on endogenous safety. The property management platform comprises an endogenous safety property management system, wherein the endogenous safety property management system comprises essential place analysis, heterogeneous resource configuration, heterogeneous execution body generation and mimicry component embedding; a security architecture technical route in the endogenous security property management system comprises a control plane and a data plane. The endogenous security property management system further comprises a mimicry construction intelligent Internet of Things zero-trust assembly, and the mimicry construction intelligent Internet of Things zero-trust assembly is used for providing endogenous security for the zero-trust system. Fine-grained security control of continuous authentication and dynamic authorization is realized by taking a software-defined dynamic fine-grained boundary as guidance, that is, a trusted network is established by taking an identity label of an Internet of Things terminal as a center, a model framework for realizing an intelligent Internet of Things zero-trusted network is researched, and a framework of an endogenous security property management system is constructed.

Methods, systems, and computer program products for executing trusted software components in public computing clouds. Verifiably authentic software components are installed into a tenant partition of a multi-tenant public cloud-based environment. To do so, a software component installer is configured to install registered software components into the tenant partition. Installer processing includes (1) obtaining a component-specific token for a software component wherein the component-specific token is specific to both the software component to be installed and a particular tenant, and (2) installing the software component on behalf of the given tenant in the multi-tenant public cloud-based environment. Prior to executing the underlying code of the tenant-specific software component, the software component is authenticated with a component registry using the component-specific token. Additional trusted components are installed based on demand from within the tenant partition. No user or administrator intervention is needed and no credentials are hard-coded into the software components.

The application provides a component verification method and device of an Internet of Things equipment and a readable storage medium, and the specific implementation scheme is as follows: reading the equipment component information of an OTP storage area after the equipment component is powered on and completed, performing self-checking based on the equipment component information to obtain a component self-checking result; sending the corresponding equipment component start state to a verification platform according to the component self-checking result; receiving a discrimination random number generated by the verification platform in response to the normal start state of the equipment component, calling an internal private key to digitally sign the discrimination random number to obtain a signature value; and sending the signature value and the built-in digital certificate to the verification platform to verify whether the component of the Internet of Things equipment is a trusted component. The application scheme provides a component trusted verification mechanism of the Internet of Things equipment, improves the component trustworthiness of the Internet of Things equipment, and in addition, the component self-checking by the Internet of Things equipment and the second re-verification by the verification platform improve the security strength of the equipment component verification.

The application provides a method for dividing and automatically deploying trusted components of a trusted DCS controller, comprising: dividing components in the trusted DCS controller into trust_module bottom management trusted security components and agent proxy management communication trusted security components according to the functional characteristics and security requirements of the components in the trusted DCS controller; and simultaneously or separately installing the trust_module bottom management trusted security components and the agent proxy management communication trusted security components by using a trust_module trusted security component automatic deployment tool and an agent proxy trusted security component automatic deployment tool. The application realizes modular design of trusted components, and the required trusted security components can be separately installed and configured, so that the deployment process of the trusted components is greatly simplified and the deployment efficiency is improved.

The invention relates to the technical field of creative mobile terminals, in particular to a trusted startup method and system for a creative mobile terminal, and the method comprises the steps: carrying out hierarchical verification and state monitoring on a hardware trust root module, security startup firmware and an operating system kernel, extracting multi-dimensional security features, and constructing a system security feature vector; secondly, establishing a trust chain component dependency graph, and generating a trusted startup sequence with the minimum security risk through constraint optimization; in combination with the trusted startup sequence and the feature vector, intelligently identifying startup threats and dividing risk levels to form a layered security protection strategy; and dynamically adjusting a protection strategy and allocating a resource weight, loading and dividing the trusted component into a high-security verification area and a basic verification area for block verification, and outputting a trusted startup execution result. According to the method, full-link trusted measurement, intelligent risk management and control and resource optimization scheduling in the starting process are realized, and the safety and starting efficiency of the credential terminal are remarkably improved.