| 摘要: |
| 由于可信计算平台自身的设计原理及机制上的缺陷,其在面对物理攻击时很难有效地保护整个平台系统的安全性,而基于信号完整性分析的TPM芯片设计思想已给出了较好的解决方案.在上述研究工作的基础上,进一步提出了逻辑分层的TPM-APM(TPM-analog parameter measurement)子模块改进设计方案.通过对时延模拟参数的度量,给出了TPM芯片中TPM-APM子模块的工程实现方法,并使用眼图比对法,为TPM-APM子模块实现的可行性进行了验证.分析结果表明,引入改进设计的TPM-APM子模块可增强可信计算平台面对物理攻击时的防御能力. |
| 关键词: 可信计算 物理攻击 TPM 信号完整性分析 时延 |
| DOI: |
| 分类号: |
| 基金项目:国家自然基金委员会-广东联合基金(U1135002);国家科技部重大专项(2011ZX03005-002) |
|
| Design of TPM Chip Based on Signal Integrity Analysis |
|
CHEN Xi1,2
|
|
1.Department of Post-Doctoral Research Center, China Merchants Bank, Shenzhen 518067, China;2.Department of Information Technology, China Merchants Bank, Shenzhen 518057, China
|
| Abstract: |
| Due to the defects caused by design principle and mechanism, Trusted Computing Platform can't effectively protect the system security from physical attacks. A novel design method based on signal integrity analysis was introduced to solve this problem. Based on the work stated above, this paper proposes a revised logical hierarchical design of TPM-APM (TPM-analog parameter measurement) sub-module. Furthermore, engineering implementation method of TPM-APM sub-module is provided by measuring the analog parameters of delay. Through comparing eye patterns, the practicability of implementing the TPM-APM sub-module is verified. Detailed analysis and experiment reveal that the revised TPM-APM sub-module can effectively enhance the ability of protecting Trusted Computing Platform against physical attacks. |
| Key words: trusted computing physical attack TPM signal integrity analysis delay |