嵌入式可信平台构建技术研究

为了解决嵌入式终端缺乏完整性度量和应用软件任意执行的问题，在研究可信计算技术、嵌入式可信密码模块和服务模块的基础上，通过引入星形链可信传递模型和软件签名验证机制，设计了在内核空间软件签名验证的实现方案，构建了针对嵌入式设备的可信平台体系结构。该嵌入式可信平台可保证终端的完整性和应用软件的可信启动，可防止恶意代码的破坏，有效提高了嵌入式终端设备的安全性和可信性。

Study on Construction Technology of Embedded Trusted Platform

In order to solve the problem of integrity measurement in embedded terminal and arbitrary execution of the application software, based on in-depth study of trusted computing, embedded trusted cryptographic module and service module, the star-chain trusted transfer model and the software authentication mechanism are introduced, the implementation scheme of software authentication in kernel space of operating system is designed, and the embedded trusted platform architecture for embedded devices is constructed. The embedded trusted platform could ensure integrality of the terminal and trusted startup of the application software, guard against destruction by the malicious code, and effectively enhance security and creditability of the embedded terminal.