Study on Trusted Computing and Measurement Certification Technology of On-Board Operating System

星载操作系统可信计算与度量认证技术研究

¹ Space Star Technology Co., Ltd, Beijing 100086, China
² Beijing Engineering Research Center of Space-Ground Integrated Information Security, Beijng 100020, China
³ Northwestern Polytechnical University, Xi'an 710072, China
⁴ Research and Development Institute of Northwestern Polytechnical University in Shenzhen, Shenzhen 518057, China

Received: 14 January 2020

Abstract

Based on the complexity of space environment and the limitation of space resources, a dynamic metric authentication method for spaceborne operating system with the trusted chip support is proposed, and the configurable key metric object identification scheme and verification strategy are given. In this method, Key measurement objects and measurement strategies can be set according to the key level of on-board application. The critical application processes in operation can be measured and verified periodically, then a system security protection verification mechanism for on-board software is obtained. The experimental results show that the dynamic measurement method improves the reliability of the system, and the performance meets the requirements of on-board applications, which has great practical value.

摘要

针对空间环境复杂和星载资源受限的特点，基于可信芯片支持，提出了一种适应于星载操作系统的动态度量认证方法，给出可配置的关键度量对象标识方案和验证策略。该方法根据星载应用关键等级设置关键度量对象和度量策略，对运行中关键应用进程进行周期性的度量验证，形成了一套星载软件的系统安全防护验证机制。实验结果表明，动态度量方法提升了系统可信度，性能满足星上应用要求，具有很好的实用价值。