关键词: 可信平台模块, 可信引导, 可信计算

Abstract: Security of the booting process in a computing system is a starting point of the security of the overall system. Secure booting system will guarantee that entities in the booting chain have not been tampered. On the other hand, trusted booting system based on TPM can only record evident chain during system booting without further processing. This paper presents a configurable trusted booting system which can be configured to boot the system in secure mode or trusted mode and can further support fine-grained file verification and kernel recovery. Prototype shows that the system can reach its design goals.