摘要
可信计算规范是指导可信计算产品研制的依据,可信计算规范本身的安全性需要得到验证.信任链是可信计算平台中保障系统安全可靠的主要技术手段,它是可信计算平台整个系统安全的中心问题.针对可信计算平台信任链规范的信息流安全问题,文中通过安全进程代数对信任链系统接口进行形式化建模,用可复合的不可演绎模型刻画信任链实体间的交互关系,把规范定义的信任链行为特性抽象为多级安全输入输出集,在讨论高级和低级输入输出依赖关系的基础之上,对信任链复合系统进行信息流分析,并给出结论和证明.
The specifications of trusted computing are guidance for products. But securities of specifications themselves need to be verified. The chain of trust is the key technical method to assure system security and is the focus of security in trusted computing platform. Aiming at information flow issue on specification of chain of trust, this paper uses secure process algebra to model trust chain, and describes mutual relationships between entities by non deducibility on composition, and abstracts the behavior and characters of specification of trust chain to multi-level secure inputs and outputs. After discussing associated relations of I/O of high level and low level, we analyzed the system of trust chain. Finally we put forward some conclusions and sounds prove.
出处
《计算机学报》
EI
CSCD
北大核心
2010年第7期1165-1176,共12页
Chinese Journal of Computers
基金
国家"八六三"高技术研究发展计划项目基金(2007AA01Z411)
国家自然科学基金(60673071)资助~~
关键词
信任链
安全进程代数
可复合的不可演绎模型
chain of trust
secure process algebra
non deducibility on composition
