基于可信计算联盟的规范,设计了基于TPM的可信引导过程,并指出了该可信引导过程中亟待解决的问题。安全性分析表明,该可信引导过程可以使计算机获得更高的安全保障,为进一步建立可信计算环境提供了基础。
According to the standards of the trusted computing group, based on the analysis to the boot process of the common operator system, this paper designed a trusted boot process which has ability to collect and attest the integrity status of the system, and discussed the problems in the process which have to be resolved urgently. It is shows by the security analysis that the high assurance of system security.has been gained, thus the basis for building the trusted computing environment has been provided.