The security solution for Windows XP end of life with trusted computing technology

摘要

The system based on trusted computing is proposed to secure IT system after the Windows XP end of life. The system consists of a series of software, hardware and firmware, including Trusted Platform Module, BIOS, Operating System, Trusted Software Base, Trusted Management Center, etc. It performs functions of interface services, measurement, access control with trusted measurement, trusted storage and trusted report mechanism. The proposed system has been deployed in many IT systems, including the state grid, a department in Beijing municipal government, a military IT system, etc. The application results show that the system could effectively protect their IT system from attacks.