【摘要】 现有的可信评估都是基于计算机软件扫描或可信模块通过本机报告或网络远程证明来实现的，这提供了本机执行环境构建过程及运行态的可信度量保障，但从网络应用角度来看，还存在着系统性的安全风险。文中提出一种在可信平台控制模块（TPCM）内部增加实现的网络节点信任评估方法来解决这个问题。该方法在双体系架构（计算+防御）下通过防御单元的TPCM来实现快速可靠的信任评估系统，评估后的可信值通过TPCM进行存储和维护。该方案既避免设备受攻击后的伪造，又释放了CPU的计算资源。通过研究基于TPCM支撑的网络节点信任评估系统，实现了轻量级计算机网络平台节点可信性的系统性评估，保障了网络的安全可信运行。更多还原

【Abstract】 The existing trust assessment is based on computer software scanning or trust modules that are achieved through local reporting or remote network authentication,which solves the trust measurement guarantee for the construction process and running status of the local execution environment.However,from the perspective of network applications,there are still systemic security risks.This paper proposes a network node trust evaluation method that adds implementation within the trusted platform control module(TPCM)to address this issue.This method achieves a fast and reliable trust evaluation system under a dual architecture(computing+defense)through the TPCM of defense units,and the evaluated trust values are stored and maintained through TPCM.This scheme not only avoids device forgery after being attacked,but also frees up CPU computing resources.This paper studies a network node trust evaluation system based on TPCM support to achieve a systematic evaluation of the credibility of lightweight computer network platform nodes,ensuring the safe and reliable operation of the network.更多还原