关键词: 可信计算, 可信密码模块, 信息安全, 性能优化

Abstract: Trusted computing technology is an important technical to ensure information security which implementation depends on trusted chip. The trusted cryptography module (TCM) is a kind of trusted chip that conforms to Chinese standards. Currently, the TCM application interface defined in functionality and interface specification of cryptographic support platform for trusted computing has some problems, such as the use process is complex and low ease of use, which hinders the application of trusted computing technology. To solve these problems, a set of optimized TCM application layer interface is proposed, which is divided into four modules according to functions, namely cryptography algorithm service module, TCM resource service module, identity authentication service module and platform protection service module. In addition, an optimized method about context resources management and TCM resources recovery is proposed, which can effectively improve the usability of the interface and enhance the recovery capability of TCM resources. Experimental results show that the optimized interface increases the time cost by less than 10% compared with the interface in the specification, but it can significantly reduce the number of lines of core code.

Key words: trusted computing, TCM, information security, performance optimization