GB/T 38638-2020Information security technology—Trusted computing—Architecture of trusted computing (English PDF)

1 Scope

This Standard specifies the architecture of trusted computing, trusted components and integrity measurement modes, as well as types of trusted computing nodes.

This Standard applies to the design, development and application of trusted computing systems.

2 Normative references

The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.

GB/T 29827-2013 Information security technology - Trusted computing specification - Motherboard function and interface of trusted platform

GB/T 29828-2013 Information security technology - Trusted computing specification - Trusted connect architecture

GB/T 29829-2013 Information security techniques - Functionality and interface specification of cryptographic support platform for trusted computing

GB/T 36639-2018 Information security technology - Trusted computing specification - Trusted support platform for server

GB/T 37935-2019 Information security technology - Trusted computing specification - Trusted software base ISO/IEC 11889:2015 Information technology - Trusted

3 Terms and definitions

platform module library A collection of software elements that support the trustworthiness of a trusted computing platform. [GB/T 37935-2019, definition 3.3]

4 Abbreviations

For the purpose of this document, the following abbreviations apply.

BIOS: Basic Input Output System CRTM: Core Root of Trust for Measurement TCM: Trusted Cryptography Module TPCM: Trusted Platform Control Module TPM: Trusted Platform Module TSB: Trusted Software Base TSM: TCM Service Module TSS: TCG Software Stack

5 Architecture of trusted computing

Trusted computing refers to the safety protection while computing, and the whole computing process can be measured and controlled without interference, so that the computing results are always consistent with expectations. The trusted computing system is composed of trusted computing nodes and trusted connections between them, which provide corresponding levels of security for the network environment in which they are located, as shown in Figure 1.

According to the functions of the nodes in the network environment, trusted computing nodes can deploy applications with different functions according to their business environment. Trusted computing nodes include trusted independent module or physical package, or be realized by integration and virtualization with TCM/TPM through IP core or firmware.

6 Trusted components and integrity measurement modes