[1]赵斌[],杨明华[],柳伟[],等. 基于龙芯处理器的自主可信计算机研究[J].计算机技术与发展,2015,25(03):126-130.
　ZHAO Bin[],YANG Ming-hua[],LIU Wei[],et al. Research on Security & Trust Computer Based on Loongson CPU[J].,2015,25(03):126-130.
点击复制

 基于龙芯处理器的自主可信计算机研究()
分享到：

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:
25
期数:
2015年03期
页码:
126-130
栏目:
安全与防范
出版日期:
2015-03-10

文章信息/Info

Title:
 Research on Security & Trust Computer Based on Loongson CPU
文章编号:
1673-629X（2015)03-0126-05
作者:
 赵斌[1]; 杨明华[2] ; 柳伟[3]; 冯磊[1]; 路永轲[1]
 1.山东超越数控电子有限公司；2.第二炮兵装备研究院；3.北京理工大学 计算机学院
Author(s):
 ZHAO Bin[1]；YANG Ming-hua[2]；LIU Wei[3]；FENG Lei[1]；LU Yong-ke[1]
关键词:
 ; 可信计算; 主动度量; 龙芯处理器; 端口控制; 可信引导
Keywords:
 ; trusted computing; initiative measurement; Loongson CPU; port control; trusted boot
分类号:
TP393.08
文献标志码:
A
摘要:
 “斯诺登”事件再一次证明，采用国外关键软硬件的计算机具有不可控的漏洞和后门，信息系统采用非自主的计算机给国家、企业、军队带来安全威胁。文中设计并实现了一种安全可信计算机，采用国产龙芯处理器，减少了后门安全隐患，通过设计板载可信密码模块、端口控制电路和身份认证装置，实现了BIOS主动度量恢复，硬件级的端口控制和身份认证功能，同时实现了对硬件、MBR、操作系统的完整性保护功能。通过实验测试表明，文中设计实现的安全可信计算机原理样机具备身份认证、主动度量BIOS、端口控制、完整信任链保护等安全可信功能，大大提高了计算机的安全性。
Abstract:
 The event of "Snowden" once again proved that using foreign computers has not controllable bug and backdoor,information system using foreign computer poses a security threat to the state,enterprises and troops. In this paper,design and implement a trust&se-curity computer,using Native Loongson CPU,reducing the security risks of back door,through the design of on-board trusted crypto-graphic module,port control circuit and authentication devices to achieve the initiative measurement of BIOS,BIOS restoring,hardware levels port control and authentication functions. Moreover,implement the integrity protection of the hardware,MBR and OS. The experi-ments indicated that the security trusted computer principle prototype designed and implemented in this paper has implemented the identity authentication,active measurement of BIOS,port control,complete chain of trust protection,which can greatly enhance the security of computer.

相似文献/References:

[1]李超 王红胜 陈军广 孙蕊.加强计算机终端信息安全的两种解决方案[J].计算机技术与发展,2009,(01):165.
　LI Chao,WANG Hong-sheng,CHEN Jun-guang,et al.Two Solutions to Strengthen Computer＇s Terminal Information Security[J].,2009,(03):165.
[2]陈建勋 侯方勇 李磊.可信计算研究[J].计算机技术与发展,2010,(09):1.
　CHEN Jian-xun,HOU Fang-yong,LI Lei.A Review of Trusted Computing[J].,2010,(03):1.
[3]张珂.新型可信计算平台体系结构研究[J].计算机技术与发展,2011,(07):153.
　ZHANG Ke.New Trusted Computing Platform Architecture[J].,2011,(03):153.
[4]禹蒲阳 康国胜.可信计算的研究与发展[J].计算机技术与发展,2011,(08):233.
　YU Pu-yang,KANG Guo-sheng.Research and Development of Trusted Computing[J].,2011,(03):233.
[5]费稼轩 张涛 林为民 陈亚东 曾荣.基于动态可信度量的敏感信息安全控制模型[J].计算机技术与发展,2012,(05):237.
　FEI Jia-xuan,ZHANG Tao,LIN Wei-min,et al.Secure Control Model of Sensitive Information Based on Dynamic Trust Measurement[J].,2012,(03):237.
[6]陈亚东,张涛,曾荣,等.输电线路在线监测可信接入系统设计[J].计算机技术与发展,2013,(05):113.
　CHEN Ya-dong,ZHANG Tao,ZENG Rong,et al.Design of Trusted Access System for Transmission Line Monitoring[J].,2013,(03):113.
[7]张丽娟,吴振强.一种可控可信匿名的物联网查询机制[J].计算机技术与发展,2013,(06):122.
　ZHANG Li-juan,WU Zhen-qiang.A Controllable Trusted and Anonymous Query Mechanism of Internet of Things[J].,2013,(03):122.
[8]张弢,任帅,张德刚[].基于可信计算的Ad Hoc网络直接匿名证明[J].计算机技术与发展,2014,24(04):147.
　ZHANG Tao[],REN Shuai[],ZHANG De-gang[].Direct Anonymous Attestation to Ad Hoc Networks Based on Trusted Computing[J].,2014,24(03):147.
[9]张志宏,吴庆波,邵立松,等.基于飞腾平台TOE协议栈的设计与实现[J].计算机技术与发展,2014,24(07):1.
　ZHANG Zhi-hong,WU Qing-bo,SHAO Li-song,et al. Design and Implementation of TCP/IP Offload Engine Protocol Stack Based on FT Platform[J].,2014,24(03):1.
[10]梁文快,李毅. 改进的基因表达算法对航班优化排序问题研究[J].计算机技术与发展,2014,24(07):5.
　LIANG Wen-kuai,LI Yi. Research on Optimization of Flight Scheduling Problem Based on Improved Gene Expression Algorithm[J].,2014,24(03):5.
[11]周毅[],贾佳[],廖军[],等. 基于进化理论的可信计算环境实现[J].计算机技术与发展,2014,24(07):99.
　ZHOU Yi[],JIA Jia[],LIAO Jun[],et al. Implementation of Trusted Computing Environment Based on Evolutionary Theory[J].,2014,24(03):99.
[12]易平,庄毅.基于龙芯处理器的嵌入式可信解决方案[J].计算机技术与发展,2018,28(05):112.[doi:10.3969/ j. issn.1673-629X.2018.05.026]
　YI Ping,ZHUANG Yi.Design and Implementation of Embedded Trusted Platform Based on LOONGSON Processor[J].,2018,28(03):112.[doi:10.3969/ j. issn.1673-629X.2018.05.026]

更新日期/Last Update: 2015-05-04