An Improved Method of TPM Access Control Based on Xen

JI Tao; LI Yong-zhong

Chinese

您当前的位置：

首页 >

文章列表页 >

An Improved Method of TPM Access Control Based on Xen

更新时间：2026-09-04

- An Improved Method of TPM Access Control Based on Xen
- Vol. 29, Issue 11, Pages: 152-156(2012)
- 作者机构：
  
  江苏科技大学机构计算机科学与工程学院,江苏,镇江,212003
- 作者简介：
- 基金信息：
- DOI：
  CLC：
- Published：2012
- 稿件说明：
移动端阅览
季涛, 李永忠. 一种基于Xen的TPM访问控制改进方法[J]. 微电子学与计算机, 2012, 29(11): 152-156.

JI Tao, LI Yong-zhong. An Improved Method of TPM Access Control Based on Xen[J]. 2012, 29(11): 152-156.
季涛, 李永忠. 一种基于Xen的TPM访问控制改进方法[J]. 微电子学与计算机, 2012, 29(11): 152-156. DOI：

JI Tao, LI Yong-zhong. An Improved Method of TPM Access Control Based on Xen[J]. 2012, 29(11): 152-156. DOI：

摘要

针对可信平台模块(TPM)访问受重放攻击和替换攻击威胁的问题

提出一种改进的TPM访问控制方法.首先建立TPM长期访问控制功能

通过创建额外授权数据以保证进程结束后继续授权会话

同时将TPM地址与Domain U的身份标识号相关联

以保护其地址免受替换攻击.其次

建立TPM所有权共享功能

允许多个DomainU使用相同的TPM地址并防止死锁

因共享地址不能被重写

可保护敏感数据免受攻击.最后基于Xen实现了该方法并评估了其性能.实验结果证明了该方法的可行性和有效性

TPM访问性能开销在可接受的范围内.

Abstract

Aimed at solving the problem that TPM access was threatened by attacks such as replay attack and substitution attack

an improved method of TPM access control was proposed.First

TPM long term access control function was established.Extra authorization data was created to continue authorization session after finishing the process.Meanwhile

TPM address was related with an ID of Domain U to protect TPM address form substitution attack.Then

TPM shared ownership function was established

allowing plural Domain Us to use the same TPM address and preventing from the deadlock.Sensitive data was protected against attack because shared address was not rewritable.Finally

this method was implemented based on Xen and its performance was evaluated.Experiments results verified the feasibility and the effectiveness of this method and the overhead of TPM access was within the acceptable range.

关键词

Keywords

references

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

A Multi-Level Authorization Management Model in Distributed System

Research on the Authorization Policy in Grid

Simulation on the DC characteristics of double heterojunction p-GaN HEMT with AlN/GaN hybrid buffer layer

Steganography model guided by attention mechanism and improved dense convolution

Microservices anomaly detection based on the correlation of monitoring metrics

Related Author

MA Guo-fu

WANG Zi-xian

DONG Yan-jun

BAO Mei-ying

MA Li

GAO Yu-bin

Related Institution

1 Department of Information Management, The Central Institute for Correctional Police

2 Modern Education Technical Center, The Central Institute for Correctional Police

3 Department of Education and Information Technoligy, Baoding University

1 School of Information and Communication Engineering, North University of China

2 Department of Computer Science and Technology, Shanxi Datong University

AI问答

Postal code：100079
Tel：（010）53879206 Email：tmw@bjxintong.com.cn
Technical support is provided by Beijing Founder electronics co., LTD 京ICP备09082226号-64 京公网安备11010602201714号
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰