Dengguo Feng - Trusted Computing: Principles and Applications

With further development of computer network, the three most prominent threats are gradually highlighted, including attacks from malicious code, illegal stealing of information and illegal corruption of data and system. Within these threats, attacks from malicious code have surpassed traditional computer virus to be the predominant threat to private information of computer users. These threats originate from the situation that computer architecture lacks an immune system against malicious code. Thus, it is a core issue to accommodate immune system in computer architecture and ensure a computer platform to run securely and trustworthily.

Trusted computing is a kind of technique proposed under this background. By establishing a mechanism of integrity measurement, trusted computing enables computing platforms to distinguish between trusted programs and untrusted programs. In this way, computing platforms employ reliable countermeasures to prevent untrusted programs from disrupting.

I led a team starting research in trusted computing technique as early as 2003. Since 2006, I have been the chairman of TCMU (Trusted Cryptography Module Union) of China. I actively promote research, development and industrialization of trusted computing in China, and have achieved satisfactory results. Our team has taken a number of national research projects, including projects from Chinese 863 Program, industrialization projects of high technique from National Development and Reform Committee and major programs from National Natural Science Foundation. We have made breakthrough in several key aspects of trusted computing, including establishing and repairing technique of chain of trust, remote attestation protocol based on TCM and automatic generation method of test use cases based on reduction. We have also proposed a series of products, including advanced security supporting platform of trusted computing with self-owned intellectual property and test and evaluation system of trusted computing that supports compliance test, security test and performance test of trusted computing. These products have obtained good social and economic benefits now. Our research result Research and Application on the Security Supporting Platform and Key Technique for Trusted Computing achieved the first prize of Information Science Technique awarded by Chinese Institute of Electronics in 2010. In the future, we will continue our work and strive for better achievements and greater honor.

This book includes eight chapters. proposes trusted network connection.

The main content of this book comes from my formal monograph Trusted Computing Theory and Practice (ISBN:9787302314226), which is written in Chinese and published by Tsinghua University Press in 2013. Weve made our effort to translate the monograph,make corrections on its contents which are outdated and add a few new technologies, so as to present the highest quality collection of trusted computing technology. A group of my colleagues and doctor candidates have participated in writing and proofreading this book, including Yu Qin, Xiaobo Chu, Shijun Zhao, Jing Xu, Dexian Chang, Jianxiong Shao, Weijin Wang, Bo Yang, Bianxia Du and Wei Feng. We have also got great help from many researchers and editors. We want to express my sincere thanks to them here.

Dengguo Feng

March 17, 2017.