Chinese Journal of Computers   Full Text
Title	Research on Compliant Testing Method of Trusted Cryptography Module
Authors	LI Hao1),2) HU Hao1),2),3) CHEN Xiao-Feng1),2)
Address	1)(State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing 100190) 2)(National Engineering Research Center of Information Security, Beijing 100190) 3)(Department of Electronic Engineering and Information Science, University of Science and Technology of China, Hefei 230027)
Year	2009
Issue	No.4(654—663)
Abstract &   Background	Abstract A formal method for compliant test of Trusted Cryptography Module (TCM) is proposed in this paper, which uses EFSM and testing vectors to build the formal model of TCM’s standard. Since the modeling method presents the arithmetic for getting the dependency graph of the TCM’s commands, the process of building EFSM and the way of getting testing vectors, the test case set can be built effectively. Through the experiments using the new method to do the compliant test of TCM and contrast to other related works, the results show that the proposed method in this paper is more effective in getting test cases and can bring better fault inspection rate. Keywords trusted computing; TCM; formal method; compliant test； EFSM Background The work is part of the project “Testing and Evaluating System and Tools for Trusted Computing Platform”, which is supported by the National High Technology Research and Development Program(863 Program) of China under grant No.2007AA01Z412, and the National Key Technology R&D Program of China under grant No.2008BAH22B06. With the development of trusted computing, the test and evaluation for trusted computing platform becomes more and more important recently. The Trusted Cryptography Module (TCM), which is specified and made by China, acts as root of trust and is the basis for all trusted computing services and applications. Hence, the testing and evaluating for TCM is one of the most important researches in trusted computing. The recent researches such as the compliant test of Trusted Platform Module (TPM) by Ruhr-University Bochum and the compliant test of TCM by Wuhan University present the importance of compliant test to TPM＼TCM. However the methods they use in compliant test are not effective and less of persuasion. In this paper, the authors propose a formal method for compliant test of TCM, which uses EFSM and testing vectors to build the formal model of TCM’s standard. Since the modeling method presents the arithmetic for getting the dependency graph of the TCM’s commands, the process of building EFSM and the way of getting testing vectors, the test case set can be built effectively. Finally, the results of the experiments show that the proposed method in this paper is more effective in getting test cases and can bring better fault inspection rate.