The Design And Implementation Of The Security Scheme Of TVOS Intelligent Terminal Set Top Box

With the arrival of the triple play trend, the terminal intelligent trend is getting more and more clear, and the intelligent terminal products which is based on the intelligent operation system becomes the trend of the future development. Shaanxi Broadcast and TV Network combined with the Shaanxi province's digital TV network development and the growing demands of individual users, research and developed a new intelligent terminal set-top box which is based on the TV Operating System from State Administration of radio and television, and it has passed the test of the General Administration of standardization.However, In the open environment of terminal intelligence, network interconnection,business diversity, information sharing, the security challenges become increasingly serious,In full recognition of the strength and breadth of security challenges, and in-depth analysis of the system intrusion, information theft of other intelligent operation system,TVOS intelligent terminal security issues have been put on the agenda, TVOS intelligent terminal security is the foundation of ensure the terminal reliable operation, business orderly conduct, users to use at ease.This thesis studies TVOS hardware system and software platform and its realization mechanism of main business functions, and then mainly focuses on the security problems of the system,such as reinstal, illegal application and system intrusion and so on. We put forward the security scheme of the TVOS intelligent terminal and detailed the design method of the scheme to solve the problems of reinstall, illegal application, system intrusion etc, then puts forward the security scheme of TVOS intelligent terminal set top box. The security scheme is mainly divided into two aspects:1. The design and implementation of the TVOS terminal security system mainly describes the various levels of security implementation program of the operation process: the terminal security system is based on the OTP security chip, use a variety of security technologies based on modern cryptography, software engineering, linked to the TVOS operating system kernel layer, component layer, implementation environment layer,application framework layer and organic collaboration with the TVOS functional levels.Then forming a mutual support, collaborative linkage of hierarchical security mechanism,with the protective abilities of hardware security, software security, network security, datasecurity, application security and so on.2. The design and implementation of the front end security platform mainly discusses the transmission process of the data in the process of security, and put forward the fore-end security platform scheme which purpose is to satisfy secret key's security generate,security management and security flow in the date's security transmission, Including the management and implementation of secret key / certificate, signature, application management: Fore-end security platform adopts WEB architecture to manage and generate key and digital certificate., complete OTP chip, TV operating system image, Boot Loader,and the transfer of the files before and after the signature, And can complete TVOS terminal application authentication management, application of black and white list management and each TVOS application authority management.This thesis designs a TVOS intelligent terminal security scheme, which covers all the security problems faced by the TVOS intelligent terminal. First of all, This scheme guarantees the trusted TVOS execution environment, and then provides a trusted security environment for the application program of TVOS, and finally, it can guarantee the reliable use of the software in the terminal equipment. TVOS intelligent terminal set top box security solutions, not only can fully meet the needs of radio and television security management and control, but also to protect the security of triple play.