中文摘要：

基于可信计算组织（TCG）的完整性度量只能保证组件没有被篡改,但不一定能保证系统运行可信性.其问题在于,当组件运行时,受其它组件的干扰,出现非预期的信息流,破坏了信任链传递的有效性.文章在分析可信计算平台的信任模型基础上,基于无干扰理论模型,提出了一种分析和判定可信计算平台信任链传递的方法,用形式化的方法证明了当符合非传递无干扰安全策略时,组件之间的信息流受到安全策略的限制,隔离了组件之间的干扰,这样用完整性度量方法所建立的信任链才是有效的.

英文摘要：

The integrity measurement of TCG can only insure that the components of a computing platform are tamper-proofed,which is not enough for avoiding the interference between components at runtime for building the trust chain.The interference of other components results in the unexpected information flow.The trust model of Trusted Computing Platform is analyzed in this paper.Based on the intransitive noninterference model,a formal method of analyzing the trust chain transfer is proposed.It formalized specifies the security policy isolating the interference between components that can make the trust chain valid after integrity measurement.