检索结果-南通市图书馆

Research on theory and key technology of trusted computing platform security testing and evaluation

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2010年第3期53卷 434-453页

作者： ZHANG HuanGuo1,2, YAN Fei1,2, FU JianMing1,2, XU MingDi1,2, YANG Yang1,2, HE Fan1,2 & ZHAN Jing1,2 1School of Computer, Wuhan University, Wuhan 430072, China 2Key Laboratory of Aerospace Information Security and trusted computing, Ministry of Education, Wuhan 430072, China School of Computer Wuhan University Wuhan China Key Laboratory of Aerospace Information Security and trusted computing Ministry of Education Wuhan China

trusted computing has become a new trend in the area of international information security, and the products of trusted computing platform begin to be used in application. Users will not use the products of information security, unless it goes through the testing and evaluation. Here we concentrate on the testing and evaluation problem of trusted computing platform, begin with constructing proper formalization model of trusted computing platform for testing, and establish a mathematical chain of trust model based on SPA. Moreover, we give a verification method of composite characteristics and find the potential factors threatening the trusted system in the process of remote attestation through analysis. For trusted software stack, we study the problem of automatic generation of test case and propose an improved method of generating the random test case, to raise the quality of test case. Finally, we give a prototype system of trusted computing platform and the actual test data related. The result demonstrates that there exist some flaws in the architecture of the present TCG computing platform. At the same time, some flaws are found in the products of existing trusted computing platform, thus a basis is laid for the improvement and development of trusted platform technology and its products.

关键词： information security trusted computing trusted computing platform testing and evaluation

A Peer-to-Peer Resource Sharing Scheme Using trusted computing Technology

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Wuhan University Journal of Natural Sciences 2008年第5期13卷 523-527页

作者： CHEN Lu ZHANG Huanguo ZHANG Liqiang LI Song CAI Liang School of Computer Wuhan University/Key Laboratory ofAerospace Information Security and Trusted Computing of Ministryof Education Wuhan 430072 Hubei China State Key Laboratory of Software Engineering WuhanUniversity Wuhan 430072 Hubei China Department of Information Security Information EngineeringUniversity Zhengzhou 450004 Henan China

Facing the increasing security issues in P2P networks, a scheme for resource sharing using trusted computing technologies is proposed in this paper. We advance a RS-UCON model with decision continuity and attribute mutability to control the usage process and an architecture to illustrate how TC technologies support policy enforcement with bidirectional attestation. The properties required for attestation should include not only integrity measurement value of platform and related application, but also reputation of users and access history, in order to avoid the limitation of the existing approaches. To make a permission, it is required to evaluate both the authorization and conditions of the subject and the object in resource usage to ensure trustable resources to be transferred to trusted users and platform.

关键词： resource sharing trusted computing virtualization UCON （usage control） chain of trust

EdgeKeeper: a trusted edge computing framework for ubiquitous power Internet of Things

在线全文

学校读者我要写书评

暂无评论

Frontiers of Information Technology & Electronic Engineering 2021年第3期22卷 374-399页

作者： Weiyong YANG Wei LIU Xingshen WEI Zixin GUO Kangle YANG Hao HUANG Longyun QI Department of Computer Science and Technology Nanjing UniversityNanjing 210023China NARI Group Co. Ltd.Nanjing 210003China

Ubiquitous power Internet of Things(IoT)is a smart service system oriented to all aspects of the power system,and has the characteristics of universal interconnection,human-computer interaction,comprehensive state perception,efficient information processing,and other convenient and flexible applications.It has become a hot topic in the field of IoT.We summarize some existing research work on the IoT and edge computing framework.Because it is difficult to meet the requirements of ubiquitous power IoT for edge computing in terms of real time,security,reliability,and business function adaptation using the general edge computing framework software,we propose a trusted edge computing framework,named“EdgeKeeper,”adapting to the ubiquitous power IoT.Several key technologies such as security and trust,quality of service guarantee,application management,and cloud-edge collaboration are desired to meet the needs of the edge computing framework.Experiments comprehensively evaluate EdgeKeeper from the aspects of function,performance,and security.Comparison results show that EdgeKeeper is the most suitable edge computing framework for the electricity IoT.Finally,future directions for research are proposed.

关键词： Internet of Things Ubiquitous power Internet of Things Edge computing trusted computing Network security

A Secure Distributed Authentication Scheme Based on CRT-VSS and trusted computing in MANET

在线全文

学校读者我要写书评

暂无评论

Chinese Journal of Electronics 2014年第2期23卷 284-290页

作者： WANG Xingfu LU Qiwei XIONG Yan MIAO Fuyou HUANG Wenchao LIU Tao WU Xuangou School of Computer Science and Technology University of Science and Technology of China School of Computer and Information Anhui Polytechic University School of Computer Science Anhui University of Technology

With the rapid development of Mobile ad hoc network(MANET), secure and practical authentication is becoming increasingly important. There still exist several unsolved problems. It may suffer from cheating problems and Denial of services(Do S) attacks towards authentication service. Most existing schemes do not have satisfactory efficiency due to the exponential arithmetic complexity of Shamir’s scheme. We explore the property of Verifiable secret sharing(VSS) schemes with Chinese remainder theorem(CRT), then propose a secret key distributed storage scheme based on CRT-VSS and trusted computing techniques. We discuss the homomorphism property of CRT-VSS and design a secure distributed Elliptic curve-digital signature standard(ECCDSS) authentication scheme. We provide formal guarantees towards the scheme proposed in this paper.

关键词： Secret sharing trusted computing Authentication Chinese remainder theorem

Design and implementation of a portable TPM scheme for general-purpose trusted computing based on EFI

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Frontiers of Computer Science 2011年第2期5卷 169-180页

作者： Lei HAN Jiqiang LIU Zhen HAN Xueye WEI School of Electronics and Information Engineering Beijing Jiaotong University Beijing 100044 China School of Computer and Information Technology Beijing Jiaotong University Beijing 100044 China

In today＇s globalized digital world, networkbased, mobile, and interactive collaborations have enabled work platforms of personal computers to cross multiple geographical boundaries. The new requirements of privacy-preservation, sensitive information sharing, portability, remote attestation, and robust security create new problems in system design and implementation. There are critical demands for highly secure work platforms and security enhancing mechanisms for ensuring privacy protection, component integrity, sealed storage, and remote attestation of platforms. trusted computing is a promising technology for enhancing the security of a platform using a trusted platform module （TPM）. TPM is a tamper-resistant microcontroller designed to provide robust security capabilities for computing platforms. It typically is affixed to the motherboard with a low pin count （LPC） bus. However, it limited in that TPM cannot be used directly in current common personal computers （PCs）, and TPM is not flexible and portable enough to be used in different platforms because of its interface with the PC and its certificate and key structure. For these reasons, we propose a portable trusted platform module （PTPM） scheme to build a trusted platform for the common PC based on a single cryptographic chip with a universal serial bus （USB） interface and extensible firmware interface （EFI）, by which platforms can get a similar degree of security protection in general-purpose systems. We show the structure of certificates and keys, which can bind to platforms via a PTPM and provide users with portability and flexibility in different platforms while still allowing the user and platform to be protected and attested. The implementation of prototype system is described in detail and the performance of the PTPM on cryptographic operations and time-costs of the system bootstrap are evaluated and analyzed. The results of experiments show that PTPM has high performances for supporting trusted computing and it can be used flexibly and portably by th

关键词： trusted computing portable trusted platform module （PTPM） extensible firmware interface （EFI） keys certificates

A Star-Style Trust Model with the Ability of Data Recovery for trusted computing Platform

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Wuhan University Journal of Natural Sciences 2016年第2期21卷 115-120页

作者： CHEN Lu ZHANG Huanguo ZHOU Qing ZHANG Liqiang Department of Information Security Naval University of EngineeringWuhan 430033HubeiChina School of Computer Wuhan UniversityWuhan 430072HubeiChina Foundation of Science and Technology on Information Assurance Laboratory Beijing 100072China

Varieties of trusted computing products usually follow the mechanism of liner-style chain of trust according to the specifications of TCG.The distinct advantage is that the compatibility with the existing computing platform is preferable,while the shortcomings are obvious simultaneously.A new star-style trust model with the ability of data recovery is proposed in this paper.The model can enhance the hardware-based root of trust in platform measurement,reduce the loss of trust during transfer process,extend the border of trust flexibly,and have the ability of data backup and recovery.The security and reliability of system is much more improved.It is proved that the star-style trust model is much better than the liner-style trust model in trust transfer and boundary extending etc.using formal methods in this paper.We illuminate the design and implementation of a kind of trusted PDA acting on star-style trust model.

关键词： information security trusted computing star-style trust model data recovery

Development of trusted computing Research

在线全文

学校读者我要写书评

暂无评论

Wuhan University Journal of Natural Sciences 2006年第6期11卷 1407-1413页

作者： ZHANG Huanguo LUO Jie JIN Gang ZHU Zhiqiang YU Fajiang YAN Fei School of Computer Wuhan University Wuhan 430072 Hubei China State Key Laboratory of Software Engineering Wuhan University Wuhan 430072 Hubei China

trusted computing is the new trend of information security today. This paper surveys the theory and technology of trusted computing. The development history of trusted computing, and the development of trusted computing in China are introduced in this paper, and then it analyzes some problems of trusted computing at present which are delay in theory research, some key technologies to be developed and lack of trusted software system. Some fields are worthy to be explored on are pointed out including key technology, basic theory and application in trusted computing.

关键词： computer trusted computing secure computer information security

Static Analysis-Based Behavior Model Building for trusted computing Dynamic Verification

在线全文

学校读者我要写书评

暂无评论

Wuhan University Journal of Natural Sciences 2010年第3期15卷 195-200页

作者： YU Fajiang YU Yue School of Computer Wuhan University Wuhan 430072 Hubei China Key Laboratory of Aerospace Information Security and trusted computing of Ministry of Education Wuhan University Wuhan 430072 Hubei China

Current trusted computing platform only verifies application＇s static Hash value, it could not prevent application from being dynamic attacked. This paper gives one static analysis-based behavior model building method for trusted computing dynamic verification, including control flow graph （CFG） building, finite state automata （FSA） constructing, e run cycle removing, e transition removing, deterministic finite state （DFA） constructing, trivial FSA removing, and global push down automata （PDA） constructing. According to experiment, this model built is a reduced model for dynamic verification and covers all possible paths, because it is based on binary file static analysis.

关键词： trusted computing dynamic verification behavior model finite-state automata （FSA） push down automata （PDA）

Formal Compatibility Model for trusted computing Applications

在线全文

学校读者我要写书评

暂无评论

Wuhan University Journal of Natural Sciences 2009年第5期14卷 388-392页

作者： ZHU Lu YU Sheng ZHANG Xing SHEN Changxiang School of Computer Wuhan University Wuhan 430072 Hubei China Institute of Electronic Technology Information Engineering University Zhengzhou 450004 Henan China trusted computing Laboratory Beijing University of Technology Beijing 100022 China

The Chinese specification for trusted computing, which has similar functions with those defined by the trusted computing Group （TCG）, has adopted a different cryptography scheme. Applications designed for the TCG specifications cannot directly function on platforms complying with Chinese specifications because the two cryptography schemes are not compatible with each other. In order to transplant those applications with little to no modification, the paper presents a formal compatibility model based on Zaremski and Wing＇s type system. Our model is concerned not only on the syntactic compatibility for data type, but also on the semantic compatibility for cryptographic attributes according to the feature of trusted computing. A compatibility algorithm is proposed based on the model to generate adapters for trusted computing applications.

关键词： trusted computing compatibility trusted cryptography module （TCM） TCM service module （TSM）