Trusted access scheme for intranet mobile terminal based on encrypted SD card

Jiyang LI; Pengyuan ZHAO; Zhe LIU

doi:10.11959/j.issn.2096-109x.2019042

您当前的位置：

首页 >

文章列表页 >

Trusted access scheme for intranet mobile terminal based on encrypted SD card

Papers | 更新时间：2024-06-03

- Trusted access scheme for intranet mobile terminal based on encrypted SD card
- Chinese Journal of Network and Information Security Vol. 5, Issue 4, Pages: 108-118(2019)
- 作者机构：
  
  1. 武汉大学国家网络安全学院，湖北武汉 430072
  2. 武汉大学空天信息安全与可信计算教育部重点实验室，湖北武汉 430072
  3. 河北大学网络空间安全与计算机学院，河北保定 071002
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019042
  CLC： TP309
- Online First：2019-08，
  
  Published：15 August 2019
- 稿件说明：
移动端阅览
Jiyang LI, Pengyuan ZHAO, Zhe LIU. Trusted access scheme for intranet mobile terminal based on encrypted SD card[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 108-118.
DOI：

Jiyang LI, Pengyuan ZHAO, Zhe LIU. Trusted access scheme for intranet mobile terminal based on encrypted SD card[J]. Chinese Journal of Network and Information Security, 2019, 5(4): 108-118. DOI： 10.11959/j.issn.2096-109x.2019042.

摘要

为了解决因不可信移动终端非法接入内网导致的信息安全问题，设计了一种基于加密SD卡的内网移动终端可信接入方案。通过可信计算技术，以加密SD卡作为可信硬件设备实现了移动终端设备的可信启动、完整性验证与内网可信接入，并对接入后移动终端与内网的数据交互过程提供了一种加密通信安全存储机制。实验结果表明，该方案在不改变移动终端基本架构的前提下，较为高效地对移动终端进行安全性认证，并在一定程度上保护内网环境的安全。

Abstract

In order to solve the problem of information security caused by illegal access of untrusted mobile terminals to intranet

a trusted access scheme for intranet mobile terminals based on encrypted SD card is designed.By using encrypted SD card as trusted hardware equipment

trusted start-up

integrity verification and Intranet trusted access of mobile terminal devices are realized.A secure storage and encrypted communication mechanism for data interaction between mobile terminal and Intranet is also created.The experimental results show that the scheme can effectively authenticate the security of mobile terminals without changing the basic architecture of mobile terminals

and to some extent protect the security of the Intranet environment.

关键词

Keywords

references

中国互联网协会 . 中国移动互联网发展状况及其安全报告(2017) [R ] . 北京:中国互联网协会 . 2017 .5.

Internet Society of China . China mobile Internet development and security report(2017) [R ] . Beijing:Internet Society of China . 2017 .5.

赵波 , 张焕国 , 李晶 , 等 . 可信PDA计算平台系统结构与安全机制 [J ] . 计算机学报 , 2010 , 33 ( 1 ): 82 - 92 .

ZHAO B , ZHANG H G , LI J , et al . The system architecture and security structure of trusted PDA [J ] . Chinese Journal of Computers , 2010 , 33 ( 1 ): 82 - 92 .

沈昌祥 , 张焕国 , 冯登国 , 等 . 信息安全综述 [J ] . 中国科学:技术科学 , 2007 , 37 ( 2 ): 129 - 150 .

SHEN C X , ZHANG H G , FENG D G , et al . Summary of information security [J ] . Scientia Sinica Informations , 2007 , 37 ( 2 ): 129 - 150 .

张立强 , 张焕国 , 张帆 . 可信计算中的可信度量机制 [J ] . 北京工业大学学报 , 2010 , 36 ( 5 ): 586 - 591 .

ZHANG L Q , ZAHNG H G , ZHANG F . The trust measurement scheme in trusted computing [J ] . Journal of Beijing University of Technology , 2010 , 36 ( 5 ): 586 - 591 .

段新东 , 马建峰 . 可证明安全的可信网络存储协议 [J ] . 通信学报 , 2011 , 32 ( 5 ): 169 - 174 .

DUAN X D , MA J F . Provable secure trusted protocol for network storage [J ] . Journal on Communications , 2011 , 32 ( 5 ): 169 - 174 .

ZHANG H G , WANG F . A behavior based remote trust attestation model [J ] . Wuhan University Journal of Nature Sciences , 2006 , 11 ( 6 ): 1819 - 1822 .

郑宇 , 何大可 , 何明星 . 基于可信计算的移动终端用户认证方案 [J ] . 计算机学报 , 2006 , 29 ( 8 ): 1255 - 1264 .

ZHENG Y , HE D K , HE M X . Trusted computing based user authentication for mobile equipment [J ] . Chinese Journal of Computers , 2006 , 29 ( 8 ): 1255 - 1264 .

陈书义 , 闻英友 , 赵宏 . 基于可信计算的移动平台设计方案 [J ] . 东北大学学报(自然科学版) , 2008 , 29 ( 8 ): 1096 - 1099 .

CHEN S Y , WEN Y Y , ZHAO H , et al . Conceptual design of trusted mobile platform [J ] . Journal of Northeastern University (Natural Science) , 2008 , 29 ( 8 ): 1096 - 1099 .

王晋 , 喻潇 , 刘畅 , 等 . 智能电网环境下一种基于SDKey的智能移动终端远程证明方案 [J ] . 信息网络安全 , 2018 , 7 ( 1 ): 1 - 6 .

WANG J , YU X , LIU C , et al . A remote attestation scheme for intelligent mobile terminal based on SD key in smart grid environment [J ] . Netinfo Security , 2018 , 7 ( 1 ): 1 - 6 .

赵波 , 费永康 , 向騻 , 等 . 嵌入式系统的安全启动机制研究与实现 [J ] . 计算机工程与应用 , 2014 , 50 ( 10 ): 72 - 77 .

ZHAO B , FEI Y K , XIANG S , et al . Research and implementation of secure boot mechanism for embeddedsystems [J ] . Computer Engineering and Applications , 2014 , 50 ( 10 ): 72 - 77 .

赵世军 , 冯登国 . 基于属性证明的可信网络接入方案 [J ] . 武汉大学学报(理学版) , 2012 , 58 ( 6 ): 519 - 525 .

ZHAO S J , FENG D G . A TNC Trusted network connection schema based on property attestation [J ] . Journal of Wuhan University(Natural Science Edition) , 2012 , 58 ( 6 ): 519 - 525 .

彭国军 , 邵玉如 , 郑祎 . 移动智能终端安全威胁分析与防护研究 [J ] . 信息网络安全 , 2012 , 12 ( 1 ): 58 - 63 .

PENG G J , SHAO Y R , ZHENG Y . Mobile intelligent terminal security threat analysis and protection research [J ] . Netinfo Security , 2012 , 12 ( 1 ): 58 - 63 .

JAEGER T , SAILER R , SHANKAR U . PRIMA:policy-reduced integrity measurement architecture [C ] // The 11th ACM Symposium on Access Control Models and Technologies . 2006 : 19 - 28 .

李春雅 . 基于 802.1X 的可信网络连接认证模型研究和实现 [D ] . 西安:西安电子科技大学,2010 , 2010 , 10 ( 7 ): 85 - 92 .

LI C Y.Research and implementation of the trusted network connection authentication model based on 802 . 1X [D ] . Xi’an:Xidian University,2010 , 2010 , 10 ( 7 ): 85 - 92 .

Views

401

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Application progress of SGX in trusted computing area

Research on the trusted environment of container cloud based on the TPCM

TPCM-based trusted PXE boot method for servers

Trusted platform for third-party cloud computing online evaluation and analysis technology

Analysis of communication data of mobile terminal based on protocol reversal

Related Author

Yang AN

Anqi YUAN

Bo ZHAO

Zheng LI

Ping YANG

Jianbiao ZHANG

Guojie LIU

Jianbiao ZHANG

Related Institution

School of Computer Science, Wuhan University

Beijing Information Science and Technology University

Beijing Key Laboratory of Trusted Computing

Faculty of Information Technology, Beijing University of Technology

Cyberspace Security Research Center,Peng Cheng Laboratory

⁰