Android操作系统可信计算平台架构

Android操作系统可信计算平台架构 An Architecture for Trusted Computing for Android Operating Systems 刘巍然 LIU Weiran 1 first-author 刘建伟 LIU Jianwei 1 北京航空航天大学电子信息工程学院 北京航空航天大学电子信息工程学院 School of Electric and Information Engineering,Beihang University School of Electric and Information Engineering,Beihang University 为解决现有基于Java J2ME架构构建可信计算平台时的局限性,本文针对Android操作系统特性,以移动可信模块为基础,提出了基于Android操作系统的可信平台架构,并对架构中的各个模块和技术方案的可行性进行论证,阐述了轻量级DAA匿名认证方案在本架构的实现思路,验证了此架构的可行性.分析结果表明,基于Android的可信计算平台架构可在不改变现有移动终端架构且不丧失Java特性的前提下,通过重用现有技术和硬件,使移动终端可在可信芯片的支持下进行可信认证,并保证认证速度. For breaking the limit of Java J2ME and using the benefit of Android Operating System,this paper outlines a new architecture focusing on Android platform,including the design for a Mobile Trusted Module to be used as a trusted computing base.By analyzing each model and implementing lightweight Anonymous Credentials in this new architecture,we believe that the new architecture can be implemented.We reuse currently existing technology and hardware to design this new architecture,proving that mobile devices can be improved to a trusted computing platform without losing the benefits of Java platform. 关键词:可信计算 移动可信模块 Java Android trusted computing mobile trusted module Java Android 10.14188/j.1671-8836.2013.02.009 TN929.5;TP309 国家重点基础研究发展计划（“973”计划）基金资助项目（2012CB315905）;高等学校博士学科点专项科研基金项目（20091102110004） 2013-02-01 2021-04-01 2 59