A Security Kernel Architecture Based Trusted Computing Platform

摘要

A security kernel architeclrne built on trusted computing platform in the light of thinking about trusted computing is presented According to this architecture, a new security module TCB (Trusted Computing Base) is added to the operation system kerneland two operation interface modes are provided for the sake of self-protection. The security kernel is divided into two parts and trusted mechanism Is separated from security functionality. Ihe TCB module implements the trusted mechanism such as measurement and attestation, while the other components of security kernel provide security functionality based on these mechanisms. This architecture takes full advantage of functions provided by trusted platform and clearly defines the security perimeter of TCB so as to assure stlf-securily from architcetmal vision. We also present function description of TCB and discuss the strengths and limitations comparing with other related researches.