基于ATX主板的TPCM主动度量及电源控制设计

发布时间：2019-05-13 07:12

【摘要】：文章提出一种基于ATX主板的可信平台控制模块(TPCM)主动度量及电源控制实现方法。该方法在保持主板原有设计的基础上,利用计算机主板已有的接口进行扩展设计,达到从第一条CPU指令开始的启动代码防篡改和防攻击的目的。结合电源控制的实现,该方法可以从根本上解决计算机启动源头代码不可信问题。该方法确保可信平台控制模块首先上电,主导计算机电源控制系统,度量启动代码的可信性和完整性。若检测到BIOS等固件信息被恶意篡改,则根据预先写在可信平台控制模块内部的安全策略进入非可信工作模式或阻止计算机上电。利用该方法设计的可信平台控制模块对计算机有主动的、绝对的控制权。极端情况下,一旦恶意代码入侵而导致系统失控的情况发生,可信平台控制模块可以采取关闭计算机、切断电源等绝对性保护措施。该方法不但可靠有效,而且实现成本低廉,安装简单。
[Abstract]:In this paper, a trusted platform control module (TPCM) active measurement and power control implementation method based on ATX motherboard is proposed. On the basis of maintaining the original design of the motherboard, this method uses the existing interface of the computer motherboard to extend the design, so as to achieve the purpose of anti-tampering and attack prevention of the starting code from the first CPU instruction. Combined with the realization of power control, this method can fundamentally solve the problem that the source code of computer startup is not credible. This method ensures that the trusted platform control module is powered on first, dominates the computer power control system, and measures the credibility and integrity of the startup code. If the firmware information such as BIOS is detected to be maliciously tampered with, the untrusted working mode or the power on the computer are prevented according to the security policy written in advance in the trusted platform control module. The trusted platform control module designed by this method has active and absolute control over the computer. In extreme cases, once the malicious code intrusion leads to the system out of control, the trusted platform control module can take absolute protection measures such as shutting down the computer and cutting off the power supply. This method is not only reliable and effective, but also low cost and simple installation.
【作者单位】：华大半导体有限公司;中国人民大学信息学院;
【基金】：国家自然科学基金[61472429]
【分类号】：TP303

【相似文献】