基于国产平台的TCM应用研究

发布时间：2019-04-02 16:46

【摘要】：自棱镜门事件遭曝光之后,网络信息安全越来越受到人们的重视,一方面让我们看清自主可控的信息设备是实现信息安全的基础,另一方面也暴露了当今通信设备的漏洞百出。可信计算作为一项新型的基于硬件的信息防护技术逐渐进入大众的视线之中,国际上可信计算组织引导着可信计算的发展方向。然而,由于可信计算自身的特殊性,对于可信模块以及相关技术必须实现自主可控。因此,国内也相继成立了可信计算发展联盟等组织,牵头来发展我国的可信计算行业,制定一系列的相关标准。可信密码模块(Trusted Cryptography Module,TCM),是一种符合我国《可信密码支撑平台功能与接口规范》标准的密码芯片。相较于可信计算组织推出的可信平台模块(Trusted Platform Module,TPM),TCM支持我国的商用密码引擎,且技术层面可以实现自主可控。本文介绍了计算机领域自主可控的发展现状与可信计算技术,使用了自主可控的龙芯3A系列CPU为处理核心,国民技术的SSX-44B可信密码模块作为可信度量根,搭建了自主可控的可信计算平台,测试了平台的相关性能;将一款开源的闭路电视监控软件移植到该平台上,并使用TCM模块对监控系统进行了保护,验证了可信计算技术应用到自主可控平台的可行性。
[Abstract]:Since the incident of prism door has been exposed, more and more attention has been paid to the network information security. On the one hand, we can see that the independent and controllable information equipment is the basis of realizing information security, on the other hand, it also exposes the loopholes of the communication equipment. Trusted computing as a new type of hardware-based information protection technology has gradually entered the public's eyes. Trusted computing organizations in the world are guiding the development of trusted computing. However, due to the particularity of trusted computing itself, it is necessary to realize independent control for trusted modules and related technologies. Therefore, China has also set up trusted Computing Development Alliance and other organizations, leading to the development of trusted computing industry in China, to formulate a series of relevant standards. Trusted Cryptography Module (Trusted Cryptography Module,TCM) is a kind of cryptographic chip which accords with the function and Interface Specification of trusted Cryptography supporting platform in China. Compared with the trusted platform module (Trusted Platform Module,TPM), TCM), the trusted platform module proposed by trusted computing organization supports the commercial cipher engine in our country, and the technical level can realize self-control. This paper introduces the state of the art of autonomous controllable computing and trusted computing technology in the computer field. The core of the process is Longxin 3A series CPU, and the trusted cipher module of national technology SSX-44B is used as the root of credibility. The independent and controllable trusted computing platform is built, and the performance of the platform is tested. An open source closed-circuit television monitoring software is transplanted to the platform and the monitoring system is protected by using TCM module. The feasibility of the trusted computing technology applied to the autonomous controllable platform is verified.
【学位授予单位】：中北大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309

【相似文献】