Design and Implementation of Office Equipment Protection Software for Power System Based on Trusted Computing
This article introduces how to reduce the security risks caused by the use of traditional network security passive protection tools in office equipment of the power system, improve the software and hardware environment security of office equipment in the power system, and solve the security protection needs of system information data. At the same time, in order to strengthen the depth of information in the national power system industry, a trustworthy computing based office equipment protection and control software has been developed and verified through testing. The product is based on trusted computing technology, with mandatory access control function as the core, enabling mainstream domestic trusted office devices to actively defend. Trusted protection software relies on installing a device containing a trusted chip TCM as the trusted root on office devices to achieve trusted measurement. Trusted protection software can be installed on PC, server, and printer office devices respectively, achieving trusted measurement of device hardware and operating system, implementing anti killing and real-time monitoring of processes, and setting up anti tampering and authorized access for important whitelist files. Finally, the authenticity and effectiveness of the trustworthy protection function were verified through various testing methods and theories. The trusted protection function starts to work immediately after the office equipment is powered on. Throughout the entire life cycle of the equipment, it can detect the movement and security status of the office equipment, and provide real-time alarms to ensure the security of user data resources and operation processes. It provides a trustworthy computing environment, effectively reducing the security risks of the system environment and enhancing the reliability and security of domestic office equipment.
Authors
- Shengbo Qu
- Dong Han (ORCID: https://orcid.org/0000-0002-9074-6708)
- Haijing Zhang (ORCID: https://orcid.org/0009-0007-7808-3159)
- Bin Zhou (ORCID: https://orcid.org/0000-0002-1592-7015)
Institutions
- Beijing Microelectronics Technology Institute (CN)
Publication Details
- Published
- 2024-08-29
- DOI
- https://doi.org/10.1109/icsece61636.2024.10729551
- Primary Topic
- Security and Verification in Computing
- Type
- article
- Field-Weighted Citation Impact
- 0.00