【摘要】 敏感或秘密信息被系统内部人员通过移动介质非法外泄是一个非常严重的现实安全问题。提出的SIFCM模型利用可信计算平台的硬件保护功能,对流出系统范围的敏感和秘密信息进行强制加密,并且保证信息在系统范围外是不可能被解密。SIFCM模型的核心是从物理上保证相关加密密钥不会流出系统范围之外,从而保证被保护信息的安全保密性。在满足信息安全保密的前提下,SIFCM的数据透明加解密机制同时也保证了用户终端系统的易用性和业务兼容性。更多还原

【Abstract】 The illegal leakage of sensitive information by authorized people is a very serious and realistic security problem.A SIFCM model is presented to solve the problem by imperatively encrypting any sensitive information flowing out of the system and cannot be de-crypted unless the information is back into the system.SIFCM model is based on the hardware protection capability of trusted computing,any key protected by the hardware security chip cannot be resolved outside so that the data encrypted by the key can be kept confidential.Besides the capability to protect sensitive information,SIFCM model can also keep the back compatibility of user system.更多还原