基于可信计算的用电信息采集终端完整性检测方案

摘要

Aiming at the information security risks faced by terminals of cyber-physical electricity information acquisition system,a terminal integrity detection scheme based on trusted computing is proposed to ensure the security of terminals considering the characteristics of acquisition terminals.The detection scheme of trusted computing group is improved from three aspects,i.e,trust structure,extended mode of trusted platform module and extended strategy,to reduce the loss of trust transmission and improve the computing flexibility of extension.Based on the verification of the proposed extension mode's feasibility and security,a new extension strategy is designed.Compared with the original scheme,the proposed scheme can optimize the computing resource and storage space to a certain level and can provide a dynamic trust measurement method for terminals.%针对信息物理融合下用电信息采集终端面临的信息安全风险问题,结合采集终端的特点,提出了一种基于可信计算的终端完整性检测方案以保护终端安全.从信任结构、可信平台模块扩展方式、扩展策略三方面改进了可信计算组织的检测方案,减少了信任传递损失,并提高了扩展在计算上的灵活性.在验证所提扩展方式可行性和安全性的基础上,重新设计了扩展策略.与原方案相比,所提方案对计算资源、存储空间的占用都有一定的优化,也为终端提供了支持动态信任度量的方法.