The Study And Design On PMAS Terminal Based On Trusted Computing

In PMAS(Police Mobile Agent Server) system,the terminal lacks of valid mechanism of trust. By introducing Trusted-Computing mechanism,the security of PMAS terminal can be enhanced.TPM(Trusted Platform Module) is the base of Trusted Computing. As the root of trust, TPM acts as RTM(Root Trust of Measurement), RTS(Root Trust of Storage) and RTR(Root Trust of Reporting) in Trusted Platform. In this way, TPM can provide the trust mechanism for Trusted Platform.This paper studies Trusted Computing technology, and takes more effort on research on TPM.At first, the concept of Trusted Computing and Trusted Platform is clarified, then the hardware structure and API(Application Programming Interface) of TPM are analyzed. With the study on Trusted Platform and TPM, Trusted Computing technology can be used in PMAS terminal. Through introducing USB-TPM module and improving the BIOS system, the structure of PMAS terminal is designed in the gross. After that, the USB-TPM module and the BIOS system are designed. Then the USB-TPM secure tools software is designed, it controls USB-TPM from many aspects, such as:hardware device management, key and algorithm management, user management, proteced storage, data encrption. At last, the BIOS system is updated in engineering.By introducing USB-TPM module in PMAS terminal, identity authentication based on USB-TPM can be taken and the security factions of TPM module can be invoked; The security in BIOS system is strengthened by adding the security module and improving BIOS transfer flow based on USB-TPM. Through the design in security layer from these two aspects, The Trusted Computing in PMAS terminal finally comes true, and the security of PMAS system is ensured from source.