北京11选5

云服务:防护嵌入式安全的有效手段

2020-05-06 10:06:23分类:云服务端开发348

  WANGLUOLIANJIEYIFANGMIANNENGGOUWEIQIANRUSHIXITONGDAILAIJUDAHAOCHU,LINGYIFANGMIANQUEKENENGWEIXIEDAOSHEBEIJISHEBEISUOGOUJIANDEWULIANWANGYINGYONGDEWANZHENGXING。RANER,ZHEIYINANTIXIANZAIKEYITONGGUOZHINENGSHEJIJISHUJIEJUE。ZHIYAOSHIYONGLEZHENGQUEDEJICHUJIAGOU,LIANWANGQIANRUSHIHEWULIANWANGSHEBEIJIUKEYILIYONGZAIXIANFUWUQUEBAOZHANGQIANQUANDIBAOHUWANGLUO,JISHIGEBIEJIEDIANZAIMOUYISHIKEZAOSHOUGONGJI。SHIXIANSUOXUANQUANJIBIESHIYIXIANGJIWEIFUZADEGONGZUO,XINGYUNDESHI,SHICHANGSHANGYONGXIANCHUDUOZHONGYOUXIAOJIEJUEFANGAN,RU:MicrosoftDEAzure SphereJIQIQIANRUSHIPlutonANQUANZIXITONG,KETIGONGYIZHENGTAOCUOSHIHEGONGJULAIYINGDUIBUTONGWEIXIE。

  1 实现物联网安全的硬件基础

  WULIANWANGSHEBEIANQUANDEYIGEJIBENYAOQIUSHIBAOHUXITONGDEWANZHENGXING,ZHEIJIUYAOQIUSHEBEIDEFANGYUCUOSHIBIXUNENGGOUFANGZHIFEISHOUQUANDEXIUGAIHERUQIN。HEIKEJIDUANJIAOHUA,TAMENHUILIYONGSUOFAXIANDERENYILOUDONGLAICHANGSHIGONGJIXITONG。OEMCHANGSHANGZEKELIYONGCENGCIHUAANQUANCELVELAIZENGQIANGQIXITONGDUIWANGLUOGONGJIDEDIYUNENGLI。LIRU,HUANCHONGQUYICHUCHANGCHANGBEIHEIKEYONGLAIDUIXITONGSHISHISHENTOURUQIN,QIGONGJIYUANLIZESHILIYONGLENEICUNSHUJUBUJU。GUODADEWANGLUOSHUJUBAOKEBEIHEIKEJIAYILIYONG,JIANGGONGJIDAIMACUNCHUZAIFENPEIJIWANGLUOHUANCHONGQUDENEICUNKONGJIANZHIWAI,ZHIHOUMUBIAOXITONGBIANHUIWUYIZHONGZHIXINGZHEIXIEGONGJIDAIMA。CONGHEIKEDEJIAODULAIKAN,ZHEIWEITAMENTIGONGLEYIGESHANGCHUANKEZHIXINGJINGXIANGWENJIANDEJIHUI。YIDANSHEBEIZHONGQI,BIANHUIZHIXINGXINDEJINGXIANGWENJIAN,RUCI,HEIKEJIUHUODELEXITONGDEWANQUANKONGZHIQUAN,NENGGOUQIEQUJIMIXINXIJIQITAYOUJIAZHIDESHUJU。

  ANQUANQIDONGJIZHIKEQUEBAOJINYUNXINGSHOUQUANFANGTIGONGDEKEZHIXINGWENJIAN,CONGERFANGZHIGELEIGONGJI。SHISHIANQUANQIDONGJIZHIDEYIGEJIBENYAOQIUSHIJIANGFEIYISHIXINGNEICUNQUYUZAIZHIZAOHOUSHEZHIWEIZHIDUQU。ZHEIYIQUYUBAOHANYINDAOJIAZAICHENGXUDAIMA,KEQIANGZHICHULIQIJIANCHAJIAZAIDAOXITONGZHONGDEQIDONGJINGXIANGDEWANZHENGXING。RUOWANZHENGXINGJIANCHASHIBAI,ZESHEBEIZHIYOUHUODEYOUXIAODEQIDONGJINGXIANGHOUCAINENGKAIQI。

  校验和是进行完整性检查的最简单机制。然而,它并不会检查启动镜像的来源。如果黑客知道如何根据制造商ID或本该保密的类似共享代码来构造虚假的启动镜像,那么仍有可能成功通过完整性检查。为此,用户需要实现更有效的完整性检查:通过确保使用本地存储的唯一ID生成的哈希数,对加载到闪存中供下次启动使用的代码进行签名,从而将制造商ID与设备自身ID相结合。为了防止可能用于窃取此ID的攻击,设备还需具备一个硬件信任根。
 

云服务:防护嵌入式安全的有效手段
 

  2 硬件信任根

  YINGJIANXINRENGENSHIYONGYUYUNXINGANQUANMINGANCAOZUODESHOUBAOHUQUYU,ZHEIXIECAOZUOKEFANGYUWULICUANGAIHEYUANCHENGGONGJI。WEILESHIXIANCILEIFANGHU,XINRENGENBUSHULEYIGEANQUANCHULIQI,GAICHULIQIDUIPIANSHANGDAIMAHESHUJUNEICUNJUYOUWEIYIDEFANGWENQUAN。JIAMIMIYAOHEQITAANQUANSHUJUDOUCUNCHUZAIZHEIXIEQUYUZHONG,QIEXINRENGENPEIZHIWEIBUYUNXUCONGWAIBUFANGWENZHEIXIENEIRONG。ANQUANCHULIQITONGCHANGJIEZHUJIAMICHULIQILAIJIAKUAICAOZUOSUDU,TONGSHILIYONGZHENSUIJISHUSHENGCHENGQI(TRNG)LAISHENGCHENGZAIXINRENGENZHIWAIYUNXINGDERUANJIANHEXITONG,YIQUEDINGTAMENSHIFOUYOUQUANFANGWENXITONGZIYUAN。PlutonANQUANZIXITONGJIUSHIYINGJIANXINRENGENDEYIGESHILI,GAIZIXITONGSHIAzure SphereMOKUAIBUSHUDEHEXINBUFEN,KETONGGUOeLUOMENGGOUMAI。

北京11选5   YOULEYINGJIANXINRENGEN,SHEBEIBUJINNENGBAOHUZISHENJIQIFASONGDESUOYOUSHUJUDEANQUAN,HAIKEYIZHENGMINGZISHENSHIXIANGWANGLUOZHONGQITAJIEDIAN(WULUNSHIYUNZHONGQITAWULIANWANGSHEBEIHAISHIFUWUQI)FASONGKEXINSHUJUDEHEFASHEBEI。ZHEIYOUZHUYUJINYIBUTIGAOSHEBEIDEANQUANXING,YINWEISHEBEIKEYIJUJUEYUMEIYOUKEJIESHOUPINGZHENGDERENHELIANWANGSHEBEIJINXINGJIAOHU。ZHEISHOUXIANJIUJIANSHAOLESHEBEIZAOSHOUHUANCHONGQUYICHUHELEISIGONGJIDEKENENGXING。PlutonHAIJIAQIANGLEXITONGNEIBUDEANQUANXING,YIKONGZHINEIXIEKENENGSHOUDAOGONGJIDEWAIWEISHEBEIDECAOZUO。CHULIQINEIDEFANGHUOQIANGKEFANGZHIDUIMINGANGONGNENGDEWEISHOUQUANFANGWEN,YIJIQITULIYONGXUJIAWAISHELAIKONGZHIXITONGDEGONGJIXINGWEI。

  RENZHENGSHIRUANJIANHUOYUANCHENGSHEBEIYONGYIZHENGMINGQISHENFENHUOZHENSHIXINGDEJIZHI。TONGCHANG,ZHEIZHONGRENZHENGSHIGENJUJIYUGONGYAOJICHUSHESHI(PKI)JIZHIDEXIEYILAIJINXINGDE。PKIJIZHIZHONG,XIAOXISHIYONGGONGYAOJINXINGJIAMI,YINWEIGONGYAOKEYIZIYOUFENFAERBUPOHUAIXIEYI,ERXIANGYINGDESIYAOCAINENGJIEMIXIAOXI。YINCI,CILEISIYAOJIANGCUNCHUZAIYINGJIANXINRENGENDEANQUANNEICUNZHONG,QIETONGCHANGZAIZHIZAOGUOCHENGZHONGJINXINGJIAZAI。

  3 通信安全

  DANGSHEBEIXIANGYAOJIANLITONGXINHUOZHENGMINGQISHENFENSHI,TAJIANGSHIYONGXIEYITONGGUOYIGEHUODUOGESIYAOSHENGCHENGZHENGSHUHEQIANMING。QIANMINGHERENZHENGXIEYIJIANGZHENSUIJISHUSHENGCHENGQI(TRNG)SHENGCHENGDESUIJISHUYUSIYAOXIANGJIEHE,YICHUANGJIANZHURUHUIHUAMIYAOZHILEIDEZHI,ZHEIXIEZHIYOUXIAOQIDUANQIESHIYONGYICIJIUHUIBEIDIUQI,YIBIMIANHEIKELANJIEXIAOXIBINGZHONGGOUMIYAOSHISHISUOWEIDEZHONGFANGGONGJI。YIDANCHUANGJIAN,PKIXIEYIKEQUEBAOZHIZAIXUYAODEANQUANQUYUNEIFANGWENSIYAO。

北京11选5   RUOSHIYONGAzure Sphere,LIANGGEZHUSIYAOZESHIYOUSHEBEIBENSHENDAZAIDEPlutonZIXITONGZAIZHIZAOGUOCHENGZHONGSHENGCHENG,QIZHIHOUSHENZHILIANRUANJIANYEWUFAZHIJIEDUQU。KEYISHUO,SIYAODESUOYOUXINXIJUNYOUPlutonZIXITONGNEIDEJIAMICHULIQICHUANGJIAN,ZHEIJIUKEFULEZHONGDUOXITONGCUNZAIDEYIGEZHONGYAOQUEXIAN,TAMENDESIYAOWANGWANGSHIZAIWAIBUSHENGCHENGBINGDAORUSHEBEI,WUYIZENGJIALEBEILANJIEDEFENGXIAN。

北京11选5   JINGUANRENHESHEBEIDOUKEYISHENGCHENGSIYAOBINGJINXINGNEIBUCUNCHU,DANBIXUQUEDINGSHEBEISHOUCICHUXIANZAIWANGLUOZHONGSHIQIMIYAOSHIFOUHEFAYOUXIAO。Azure SphereKETONGGUOSHENGCHENGPIPEIDEGONGYAOLAIJIEJUEZHEIYIWENTI:YIGEYONGYURENZHENG,LINGYIGEYONGYUYONGHUDINGYIANQUANFUWU。ZHEIXIEGONGYAOZAISHEBEIZHIZAOJIEDUANJITIGONGJIMicrosoft AzureYUNFUWUSHIYONG。TONGSHI,SHIYONGPKIJIZHISHENGCHENGDESHUZIZHENGSHUYEHUICUNCHUZAISHEBEIZHONG,ZHEIXIESHUZIZHENGSHUKEYONGYUYANZHENGLAIZIAzureFUWUQIDEXIAOXI。

北京11选5   DANGAzure SphereSHEBEILIANJIEDAOYUNSHI,TAHUIGENJUCUNCHUZAIANQUANNEICUNZHONGDEAzureCHUANGJIANDEZHENGSHULAIHEYANXIAOXI,CONGERYANZHENGFUWUQIDESHENFEN。ZAICIGUOCHENGZHONG,SHEBEIZISHENXUYAOXIANGFUWUQIJINXINGSHENFENYANZHENG,ZHEIXIANGGONGZUOKESHIYONGYUANCHENGRENZHENGXIEYIWANCHENG。Azure SphereXITONGBUJINYANZHENGSHEBEI,HAIHUIYANZHENGSHEBEIYUNXINGDEDAIMA。TAGENJUANQUANQIDONGGUOCHENGZHONGFAXIANDEDAIMAXULIEDEJIAMIHAXISHULAICHUANGJIANHUIHUAMIYAOBINGZHIXINGZHEIYICAOZUO。ZHEIXIEZHICAIYONGYOUBANZAIJIAMICHULIQISHENGCHENGDESIYAOQIANMINGJINXINGRENZHENG。YOUYUAzureFUWUKEYIGENJUSHEBEIZAIQISHUJUKUZHONGBAOCUNDEGONGYAOSHENGCHENGXIANGYINGDEGONGYAO,YINCI,TAKEYISHIYONGSHOUQUANGUJIANLAIYANZHENGSUOQIDONGDESHEBEISHENFEN。

  YUNYONGYUNFUWUJINXINGSHEBEISHENFENRENZHENGHAIJUBEIQITADUOGEHAOCHU:LIRU,ZAIAzure SphereHUANJINGXIA,RUOSHEBEIBEIZHENGSHIKEKAOQIERUANJIANYUNXINGWUWU,GAISHEBEIJIUKEHUOQUYIGEZHENGSHU。GAIZHENGSHUKEYUSHEBEIZISHENCUNCHUDEPINGZHENGYIQITIJIAOJIQITAZAIXIANFUWUHESHEBEIYIZHENGSHIQISHENFENXINXI。GAIZHENGSHUDEYOUXIAOQIJINYUEYITIAN,YOUZHUYUJIANGDISHEBEIZAOSHOUQIANZAIGONGJIDEFENGXIAN。ZHEIYEYIWEIZHE,RUOSHEBEIXUWEICHIYUWULIANWANGFUWUZHIJIANDELIANJIE,SHEBEIBIXUDINGQIZHENGSHIQIJIANKANGZHUANGKUANG。ZHEIZHONGFANGHUJIBIESHIDANJIXITONGWUFASHIXIANDE,TAMENYIDANZAOSHOUWULIGONGJISUNHAI,RUOBUJINXINGSHOUDONGWEIHUJIANCHAJIANGWUFAXIUFU。

  RUOSHEBEIWEITONGGUOANQUANQIDONGGUOCHENG,KEHUDUANSHEBEIJIANGWUFAHUODEZHENGSHU,YEJIUWUFAZUOWEIYIGEHEFAYOUXIAOQIEJINGRENZHENGDEXITONGYUNXING,ZHEIYANGYILAI,SHEBEIJIANGBEIQIEDUANYUWULIANWANGXITONGDELIANJIE,QIEQIYUNXINGFANGSHIJIANGWUFAYOUXIAOFANGYUHEIKEGONGJI。CIWAI,RUOSHENFENRENZHENGSHIBAI,YEYOUFANGFAKEYIYONGLAIGAIBIANBULIQINGKUANG,JIJIANGSHEBEILIANJIEDAOAzureFUWU,YIXIAZAIBINGANZHUANGJINGRENZHENGDEZUIXINQIDONGJINGXIANG。ZHEIJIUWEISHEBEITIGONGLEGENGGAOJIBIEDEFANGHU,KEFANGZHIHEIKELIYONGJIUBANRENZHENGGUJIANDELOUDONGSHISHIGONGJI。

  SHIJISHANG,WANGLUOLIANJIEZHICHIYICHENGWEIXUDUOQIANRUSHIXITONGSHEJIRENYUANDEYIXIANGSHIJIXUQIU。JINGUANCUNZAIYIXIEWEIXIEFENGXIAN,DANQUEWANQUANKEKONG。TONGGUOAzure SphereDENGPINGTAI,WANGLUOLIANJIENENGGOUTIGONGJIAOFEILIANWANGSHEBEIGENGWENJIANKEKAODEJIEJUEFANGAN。

上一篇:下一篇: