【作者】 张功萱； 沈创业； 王平立； 王玲；

【Author】 Zhang Gongxuan,Shen Chuangye,Wang Pingli,and Wang Ling (School of Computer Science & Technology,Nanjing University of Science & Technology,Nanjing 210094)

【机构】 南京理工大学计算机科学与技术学院；

【摘要】 针对黑客们编写的恶意程序渗透计算机网络、影响移动存储设备的驱动程序,从而盗取移动存储设备信息等问题,利用可信计算思想和嵌入式技术,构建了可信的异构双处理系统平台,研究并设计了移动存储设备——U盘——信任链的动态跟踪技术.提出了移动存储设备的信任链跟踪的方案,给出了可信度量方法,设计并实现了审计信息记录、不可信移动存储设备分级管理、可信边界条件判断等功能模块.同时,在信任根可信的前提下,给出并实现了移动存储设备访问控制及可信计算策略.实验结果表明方案合理有效,能够实现移动存储信息的可信链动态跟踪.更多还原

【Abstract】 In order to solve the problem of which computer networks are intruded with malicious programs built by hackers and then removable storage data or files are illegally delivered because of the storage drives infection,a trusted platform is built based on heterogeneous dual processors system hardware according to trusted computing idea and embedded technology.With the platform,the trusted chain tracing-dynamic technique is discussed and implemented for removable storage information like USB disk.First,the tracing scheme is proposed,and then the trust measuring method is given,finally such important function modules as audition records,classified management of untrustworthy removable storage and trusted boundary condition are designed and programmed.At he same time,the access control mechanism and trusted computing policy of removable storage are presented and implemented under the trust root being credible.The experimental results show that the scheme is reasonable and effective,and the tracing-dynamic of trusted chain can be performed.更多还原