【摘要】 针对基于Linux和TCG软件栈（Trusted computing group Software Stack,TSS）的复杂性问题，提出一种轻量级的可信软件栈。分析了TSS的基本结构与TSS在嵌入式系统的局限，总结出基于嵌入式系统的可信软件栈设计需求，设计出软件栈命令调用的机制和软件栈的结构。此外，分析了TSS密钥管理缓存算法，在flash中定义一块密钥槽空间，方便密钥管理中直接访问，阐述密钥生成的逻辑过程，实现面向嵌入式系统的可信软件系统。经实验验证，该软件栈可以结合RT-Thread实时系统实现基本的可信计算功能。更多还原

【Abstract】 Aiming at the complexity of TCG software stack(Trusted computing group Software Stack,TSS)based on Linux,a lightweight trusted software stack is proposed. This paper analyzes the basic structure of TSS and the limitations of TSS in embedded system,summarizes the design requirements of trusted software stack based on embedded system,and designs the mechanism of command call and the structure of software stack. In addition,this paper analyzes the cache algorithm of TSS key management,defines a key slot space in flash,which is convenient for direct access in key management,and expounds the logical process of key generation,realize the trusted software system for embedded system. Experiments show that the software stack can combine RT-Thread real-time system to achieve the basic trusted computing function.更多还原