抗物理攻击的TPM芯片改进设计

抗物理攻击的TPM芯片改进设计 Design of TPM Chip against Physical Attacks 陈曦 CHEN Xi1 1 first-author 杜海涛 DU Haitao2 2 李光松 LI Guangsong1 1 3 马建峰 MA Jianfeng1 1 西安电子科技大学计算机网络与信息安全教育部重点实验室 西安电子科技大学计算机网络与信息安全教育部重点实验室 Key Laboratory of Computer Networks and Information Security of Ministry of Education,Xidian University Key Laboratory of Computer Networks and Information Security of Ministry of Education,Xidian University 罗切斯特理工学院计算机工程系 罗切斯特理工学院计算机工程系 Department of Computer Engineering,Rochester Institute of Technology Department of Computer Engineering,Rochester Institute of Technology 信息工程大学信息研究系 信息工程大学信息研究系 Department of Information Research,Information Engineering University Department of Information Research,Information Engineering University 分析了目前可信计算平台中的设计缺陷,提出了一种简单有效的物理攻击.该攻击能绕过完整性度量对可信计算平台进行攻击.针对这种物理攻击,提出了基于信号完整性分析的TPM（trusted platform module）芯片改进设计方案.在TPM中增加模拟参数度量子模块TPM-APM（TPM-analog parameter measurement）,TP-APM子模块通过对可信硬件平台特定网络的模拟参数进行度量与验证,进而保证整个可信硬件平台系统的完整性. By analyzing the design deficiency of current Trusted Computing platform,a simple and effective physical attack which can bypass the integrity measurement of Trusted Computing platform was presented.Facing this physical attack,a novel design method for TPM（trusted platform module） chip based on signal integrity analysis was proposed which could enforce the Trusted Computing Platform’s credibility greatly.A sub-module called TPM-APM（TPM-analog parameter measurement）was implanted to the current TPM module.The TPM-APM sub-module measured the specific analog parameters in printed circuit board by the certain algorithm to ensure the integrity of whole system hardware. 可信计算 TPM 物理攻击 信号完整性分析 trusted computing TPM（trusted platform module） physical attacks signal integrity analysis 10.14188/j.1671-8836.2010.02.019 TP309 国家高技术研究发展计划（863）项目（2007AA01Z429）;国家自然科学基金（60633020,60872041）资助项目 2010-02-01 2021-04-01 2 56