基于可信计算嵌入式配电终端的研究与实现

发布时间：2018-01-19 05:18

本文关键词： 可信计算嵌入式配电终端可信启动完整性度量　出处：《华北电力大学(北京)》2014年硕士论文　论文类型：学位论文

【摘要】：随着计算机技术的迅速发展和智能电网建设的迅速推进,越来越多的智能配电终端作为电力系统的一种关键设备终端被广泛应用于智能电网中。虽然智能配电终端的引入给电力系统带来了诸如便利性等很多优势,同时也带来了一定的信息安全问题,因此对嵌入式智能配电终端的安全研究具有重要的现实意义。可信计算技术作为信息安全的一种解决方案,为嵌入式配电终端的安全性提供了一种新的解决思路。本文分析了现有的可信计算的启动过程和完整性度量模型,设计了一种加入验签功能并在终端平台通用的改进型可信启动流程；在可信计算静态完整性度量的基础上,提出了一种以进程为度量对象的静态度量与动态度量相结合的完整性度量机制。本文在对可信计算的启动过程和完整性度量模型进行改进的基础上,对基于可信计算嵌入式配电终端的软硬件进行了设计与部分模块的实现。选用32bitMIPS核CPU作为可信芯片的处理器,并对可信芯片的管脚进行了设计。在嵌入式可信配电终端的软件方面,运用了嵌入式可信软件栈、文件加密模块、访问控制模块和安全策略管理模块等,提高了嵌入式配电终端的可信性与安全性。最后,本文对设计的嵌入式可信软件基进行了功能测试和性能测试,结果表明设计的可信软件具有很好的可靠性。
[Abstract]:With the rapid development of computer technology and the rapid development of smart grid construction. More and more intelligent distribution terminals are widely used in smart grid as one of the key equipment terminals in power system, although the introduction of intelligent distribution terminals has brought many advantages such as convenience to the power system. At the same time, it also brings some information security problems, so the research on the security of embedded intelligent distribution terminal has important practical significance. Trusted computing technology as a solution to information security. It provides a new solution for the security of embedded distribution terminal. This paper analyzes the existing trusted computing startup process and integrity measurement model. An improved trusted startup process is designed, which can be used in the terminal platform by adding the check sign function. Based on trusted computing static integrity metrics. This paper proposes an integrity measurement mechanism which combines static measurement and dynamic measurement with process as the measurement object. This paper improves the process and integrity measurement model of trusted computing. The hardware and software of embedded distribution terminal based on trusted computing are designed and some modules are implemented. 32 bit MIPS core CPU is selected as the processor of trusted chip. In the software of embedded trusted distribution terminal, the embedded trusted software stack, file encryption module, access control module and security policy management module are used. The reliability and security of the embedded distribution terminal are improved. Finally, the function test and performance test of the embedded trusted software base are carried out in this paper. The results show that the designed trusted software has good reliability.
【学位授予单位】：华北电力大学(北京)
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP309;TM76

【参考文献】