可信计算技术在嵌入式操作系统中的应用

可信计算技术在嵌入式操作系统中的应用 Application of Trusted Computing Technology in Embedded Real-Time Operating System 徐明迪 XU Mingdi 1 first-author 张帆 ZHANG Fan 2 3 武汉数字工程研究所 武汉数字工程研究所 Wuhan Digital and Engineering Institute Wuhan Digital and Engineering Institute 杭州电子科技大学通信工程学院 杭州电子科技大学通信工程学院 College of Communication Engineering,Hangzhou Dianzi University College of Communication Engineering,Hangzhou Dianzi University 武汉轻工大学数学与计算机学院 武汉轻工大学数学与计算机学院 School of Mathematics and Computer Science,Wuhan Polytechnic University School of Mathematics and Computer Science,Wuhan Polytechnic University 针对通用可信计算技术难以直接满足嵌入式操作系统实时性要求的问题,通过对现有可信计算信任链进行裁剪,提出了一种基于完整性度量证书的信任链结构,在嵌入式操作系统内核中构造了嵌入式实时可信平台模块和可信软件栈.实验表明,嵌入式可信平台模块的平均命令执行时间节省了65.81%,嵌入式系统中的应用程序可实现密封存储、远程证明和完整性度量等可信计算功能,研究方案在总体上能够满足嵌入式系统的实时性和安全性要求. The existing trusted computing technology（TCT）is hard to satisfy the real-time property of embedded operating system（EOS）directly.Firstly,this paper put forward a new chain of trust based on integrity measurement certificate by reducing legend TCG’s chain of trust.Secondly,this paper designed the embedded real-time trusted computing module and trusted software stack which had been reduced and optimized.The average execution time of commands on embedded real-time trusted platform module saved 65.81% execution time.The applications in EOS could run using functions of sealed storage,remote attestation and integrity measurement.The experimental results showed that the scheme can meet the EOS’s requirements of real-time and security as a whole. 嵌入式操作系统 可信计算技术 完整性度量证书 实时调度 embedded operating system trusted computing technology integrity measurement certificate realtime scheduling 10.14188/j.1671-8836.2014.03.011 TP309;TP316 国防预研基金（9140A15040211CB3901）;国家自然科学基金（61003268）;浙江省教育厅基金资助项目（Y201224055） 2014-03-01 2021-04-01 3 60