摘要
针对使用USB Key硬件进行身份认证和数据签名时,存在PIN码明文传输被窃听及待签名数据有可能会被其他恶意程序篡改等安全威胁,提出了一种基于保护进程的USB Key软件安全架构,从USB Key驱动文件的完整性、防止USB Key进程被动态DLL注入和进程内存数据的非法修改等方面,确保USB Key进程的真实性和可信性,可以有效地防止PIN码的截获和USB Key进程内存数据被恶意程序修改,进而提高USB Key在使用过程中的安全性。
PIN code may be revealed and transaction data may be intercepted and modified when USB Key used in electronic payment and identification.To avoid that,a security architecture based on protection process is proposed to set up a secure execution environment for USB Key in client.Protection process can ensure the security and trust of USB Key process by verifying the integrity of the driver files,preventing the malicious DLL files inject to USB key process and deterring the interception of data using anti-Hook.
出处
《计算机工程与应用》
CSCD
北大核心
2011年第15期72-74,118,共4页
Computer Engineering and Applications
基金
国家高技术研究发展计划(863)No.2009AA01Z423
中央高校基本科研业务费专项资金资助项目No.2009JBM009~~
