一个基于进程保护的可信终端模型

针对外包数据库系统中的隐私匹配问题，提出了基于分布针对计算机终端是网络系统中安全风险的根源问题之一，提出了一种新的基于进程保护的可信终端模型。该模型通过进程静态、动态保护和进程间无千扰来判定系统的可信性。进程静态保护的主要功能是确保进程代码和辅助文件的完整性，进程动态保护的主要功能是防止进程运行的相关数据被篡改，进程间无干扰的功能是基于无千扰理论判断进程交互的合法性。理论分析结果表明，该模型的可信性与基于可信根的无干扰可信模型等价。但该模型不仅有效克服了基于可信根的无千扰可信模型中的可信传递函数。Check( )的不合理性，而且将系统的状态、动作具体化，使得该模型更直观、具体，更容易理解，与实际的终端系统更相符。

Trusted Terminal Model Based on Process Protection

Aimed at the problem that the computer terminal is the source of the safe risk in the network system, this paper proposed a new reliable terminal model based on non-interference theory. It asserts the system's trust by the protection of static and dynamic process and non-inference among processes. The main function of static process protection is to protect the integrity of the process's code and the auxiliary file. The main function of dynamic process protection is to prevent the related data from being tampered. The function of non-inference among process is to judge the legitimacy of process alternation. The theoretical security analysis shows that the credibility of this model equals the non-interferonce model based on the trusted root. However, this model not only overcomes the trusted transfer function's irrationality of the non-interference trusted model based on trusted root, but also externalizes system static and action. Then it is more intuitive, concrete, easier to understand and in line with the actual terminal system.