To enforce the endpoint security of internal network,ensure that the digital identity and physical identity agreement and the user can only login secure operate system by introducing the identity authentication system.The trusted computing theory is introduced in order to improve the malicious tamper with the resistance before login OS.The login security terminal system based on mechanism of trusted chain is presented.Finally the security and trust of the total system are proved.%为了提高企业园区网的终端登录安全,引入了身份认证系统来保证用户的数字身份与物理身份相对应.但在登录之前,如何能够安全登录操作系统,提高抵抗恶意篡改的能力,是信息安全领域研究的热点.文中引入可信计算理论[1],提出了一种基于信任链度量机制的安全登录终端系统研究.最终实现整个系统登录及运行过程的安全性、可信性.
展开▼