FTPM Vs DTPM: Ho Khetha Tharollo e Nepahetseng ea TPM
2024-09-30 15:04:37
Tafole ea likateng
Mehleng ea kajeno ea dijithale, ho bohlokoa ho boloka tlhahisoleseling e bolokehileng le e hlokolosi. Mosebetsi ona o shebane le theknoloji ea Trusted Platform Module (TPM). Ho bohlokoa bakeng sa ho sireletsa thepa ea rona ea dijithale. Ho tseba phapang lipakeng tsa firmware TPM (fTPM) le discrete TPM (dTPM) ho bohlokoa.
Theknoloji ea TPM ke motheo oa lits'ebetso tse ngata tsa ts'ireletso joalo ka tsamaiso e sireletsehileng ea boot le li-encryption key management. Ka bobeli fTPM le dTPM li na le matla a tsona bakeng sa litlhoko tse fapaneng tsa ts'ireletso. Re tla sheba TPM 2.0 le likhatelopele tse ling ho u thusa ho u khethela mojule oa ts'ireletso o molemohali.
Lintlha tsa bohlokoa
Theknoloji ea TPM e bohlokoa bakeng sa ho boloka lisebelisoa le ho laola linotlolo tsa encryption.
FTPM e kopanya ts'ebetso ea TPM ho firmware e teng.
DTPM e fana ka module ea ts'ireletso e ikemetseng bakeng sa ts'ireletso e ntlafalitsoeng.
Ho khetha pakeng tsa fTPM le dTPM ho itšetlehile ka litlhoko tse khethehileng tsa tšireletso.
Ho utloisisa TPM 2.0 ho bohlokoa bakeng sa ts'ebetsong ea sejoale-joale ea ts'ireletso.
Ka bobeli fTPM le dTPM li tšehetsa lits'ebetso tse sireletsehileng tsa bootle le polokelo ea lintlha.
TPM ke eng?
Trusted Platform Module (TPM) ke chip e khethehileng e thusang ho boloka komporo ea hau e bolokehile. E sebelisa linotlolo tsa lekunutu bakeng sa ts'ireletso. Chip ena ke senotlolo sa ho seta komporo e bolokehileng.
Li-TPM li bapala karolo e kholo ho boot e sireletsehileng. Ba etsa bonnete ba hore software e bolokehileng feela e qala. Sena se thibela lintho tse mpe ho kena.
Li boetse li thusa ho boloka data ea hau e bolokehile. Ka BitLocker, li-TPM li etsa bonnete ba hore lifaele tsa hau li notletsoe ka thata. Le ha motho a nka hard drive ea hau, ha a khone ho kena.
Li-TPM li latela melao e thata ea litlhaloso tsa TPM. Mofuta oa TPM 2.0 o betere le ho feta. E eketsa likarolo tse ncha tsa tšireletso bakeng sa lik'homphieutha tse sireletsehileng.
Mehopolo ea TPM e boloka lintlha tsa bohlokoa li bolokehile, leha komporo ea hau e koetsoe. Ena ke taba e kholo ea ho boloka data e bolokehile.
Li-TPM li bohlokoa haholo lik'hamphaning tse kholo. Ba thusa ho boloka lik'homphieutha li sireletsehile ho batho ba babe. Sena se etsa bonnete ba hore likhomphutha lia tšepahala.
| Sebopeho | Tlhaloso |
| Boot e sireletsehileng | E netefatsa bonnete ba firmware le software nakong ea ho qala. |
| Tšireletso ea Boitsebiso | E ntlafatsa litharollo tsa encryption joalo ka BitLocker ka ho boloka linotlolo tsa cryptographic. |
| TPM 2.0 Tlhaloso | E kenyelletsa tšehetso bakeng sa mefuta e mengata e fapaneng ea li-algorithms tsa cryptographic le liprothokholo tse atolositsoeng tsa tumello. |
| Mehopolo e sa Feleng | E netefatsa ho bolokoa ha data ea bohlokoa ea ts'ireletso le ha sistimi e tima. |
Ho utloisisa fTPM (Firmware TPM)
Firmware TPM, kapa fTPM, ke mokhoa oa ho eketsa TPM ho firmware ea sesebelisoa. E sebelisa likarolo tse sireletsehileng tsa CPU, joalo ka Intel's Platform Trust Technology (PTT) le TrustZone ea ARM. Sena se theha sebaka se sireletsehileng bakeng sa mesebetsi ea ts'ireletso.
Ho ba le TPM e thehiloeng ho firmware ho bolela hore ha ho hlokahale lisebelisoa tse eketsehileng tsa TPM. Sena se boloka sebaka le chelete. Litharollo tse kang Intel PTT le AMD fTPM li nolofalletsa ho laola liphiri ka ho kenya TPM ho firmware.
B. Lintlha tsa Bohlokoa le Melemo ea fTPM
1.Chelete e sebetsang: Ha ho na li-chips tse eketsehileng tsa TPM tse bolelang chelete e fokolang e sebelisitsoeng.
Tsamaiso ea 2.Streamlined: Ho bonolo ho laola mesebetsi ea TPM ha e le firmware.
3. Tšireletso e Ntlafetseng: Ho sebelisa ARM TrustZone, fTPM e eketsa tšireletso e matla khahlanong le litšokelo.
C. Matšoenyeho a Tšireletso le Bofokoli
Leha e na le melemo ea eona, fTPM e tobane le mathata. Litšitiso kapa litaba tse amanang le ho saena firmware li ka fokolisa ts'ireletso ea eona. Ho bohlokoa ho lula u ntlafatsa ts'ireletso ho boloka fTPM e tšepahala.
Ho utloisisa dTPM (Discrete TPM)
Kenyelletso ea discrete TPM, kapa dTPM, ke mohato o moholo oa pele ho ts'ireletso ea sistimi. Ho fapana le firmware TPM, e leng software ho processor ea mantlha ea sesebelisoa, dTPM ke mojule o arohaneng, oa 'mele. Hardware ena ke senotlolo sa ho laola linotlolo tsa encryption ka mokhoa o sireletsehileng le ho matlafatsa ts'ireletso ea sistimi.
dTPM ke karolo e arohaneng e hahelletsoeng ka har'a boardboard ea sistimi. Ho beoa ha eona 'meleng ho etsa hore e be sesebelisoa se ikemetseng, se sa sebetseng hantle. E boloka linotlolo tsa encryption le lits'ebetso li bolokehile ho tsoa ho CPU ea mantlha, e etsa hore lits'ebetso li sireletsehe haholoanyane.
B. Lintlha tsa Bohlokoa le Melemo ea dTPM
dTPM e totobala bakeng sa encryption ea eona e matla ea hardware ka chip e inehetseng ea TPM. Chip ena e sebetsa e le mojule oa cryptographic, ho boloka data e bolokehile. Moetso oa eona o sa tsitsang o boetse o sireletsa khahlanong le litlhaselo tsa 'mele. Hape, e ka fumana setifikeiti sa FIPS, e bonts'a hore e kopana le litekanyetso tse tiileng tsa ts'ireletso.
Encryption ea hardware e inehetseng: E netefatsa tshireletso ya maemo a hodimo.
Khokahano ea module ea Cryptographic: E thusa ho tšoara linotlolo ka mokhoa o sireletsehileng.
Moralo o hanyetsanang le tamper: E sireletsa khahlanong le litlolo tsa 'mele.
Monyetla oa setifikeiti sa FIPS: E netefatsa ho ikamahanya le maemo a thata a tšireletso.
C. Mehopolo ea Tšireletso
Ho utloisisa ts'ireletso e eketsehileng ea dTPM ke ntho ea bohlokoa. Sebopeho sa TPM chip se etsa hore e sireletsehe haholoanyane khahlano le litšokelo tsa cyber. Empa, ho bohlokoa hape ho boloka dTPM ka boeona e bolokehile ho fihlella ntle le tumello.
Ho eketsa dTPM tsamaisong ho bolela ho e kopanya e le karolo e inehetseng. Sena se matlafatsa ts'ireletso ea ts'ireletso le ho sireletsa khahlanong le likotsi tse tloaelehileng tsa software.
| Litšobotsi | dTPM |
| Mofuta | Mojule oa 'mele |
| Mosebetsi | Hardware Encryption |
| Tshireletso | Tamper-Resistant |
| Setifikeiti | Setifikeiti sa FIPS Monyetla |
Ho bapisa fTPM le dTPM
Ho khetha pakeng tsa fTPM le dTPM ho bolela ho sheba lintho tse ngata. Tsena li kenyelletsa hore na li sebetsa hantle hakae, tšireletseho ea tsona, le kamoo ho leng bonolo ho li sebelisa. Ho tseba liphapang tsena ho thusa batho ho etsa khetho e nepahetseng bakeng sa litlhoko tsa bona ho khomphutha e tšepahalang.
Ha re bua ka lebelo le ts'ebetso, re sheba hore na ba sebelisa hardware joang le hore na ba lumellana hantle hakae le boardboard. fTPM e sebelisa processor e sireletsehileng ea CPU, e bolokang chelete empa e ka liehisa sistimi tlas'a mosebetsi o boima.
Tšireletso ke senotlolo ho li-module tsa sethala tse tšepahalang. dTPM e hlahella hobane e na le yuniti ea eona e arohaneng ea lisebelisoa. Sena se etsa hore ho be betere ho loants'a litlhaselo le ho boloka data e bolokehile. E ntle bakeng sa libaka tse hlokang tšireletso ea boemo bo holimo.
Litšenyehelo le Phethahatso
Litšenyehelo le hore na ho bonolo hakae ho theha ke lintlha tse kholo. fTPM e hahiloe ka har'a CPU, e e etsa hore e theko e tlase hape e be bonolo ho e sebelisa. Empa, dTPM e hloka lisebelisoa tse eketsehileng, tse bitsang ho feta. Leha ho le joalo, e fana ka tšireletso e betere bakeng sa maemo ao ho boloka data e bolokehile ho leng bohlokoa.
DTPM vs PTT
1. DTPM - Dynamic Trust Platform Module
Mabitso a felletseng: Dynamic Trust Platform Module
Tlhaloso: Lentsoe le pharaletseng kapa le tobileng la barekisi le bolelang mekhoa ea theknoloji e fanang ka Trusted Execution Environments (TEE) kapa metso e matla ea tšepo. Ha se maemo a semmuso joalo ka TPM empa a ka bua ka mekhoa ea ts'epo e tsoetseng pele kapa ea nako ea ho sebetsa.
Sebelisa Taba:
Ho theha metso e matla ea tšepo
Tiisetso ea botšepehi ba khoutu ea nako ea nako
Sireletsa polokelo ea linotlolo le ts'ebetso ea cryptographic
2.PTT - Theknoloji ea Platform Trust
Mabitso a felletseng: Platform Trust Technology
Morekisi: Intel
Tlhaloso: Ts'ebetso e thehiloeng ho firmware e thehiloeng ho TPM (fTPM) e fanoeng ke Intel. E fana ka likarolo tsa ts'ireletso tse lumellanang le TPM 2.0 ntle le ho hloka chip e arohaneng ea 'mele ea TPM.
Sebelisa Taba:
E nolofalletsa likarolo tsa TPM tse kang BitLocker, Windows Hello, Secure Boot, joalo-joalo.
E tloaelehile lits'ebetsong tsa bareki le tsa khoebo tsa Intel
E fumaneha ho: Intel chipsets, e ka lokisoang ho BIOS/UEFI
Kakaretso Papiso
| Sebopeho | DTPM | PTT (Platform Trust Technology) |
| Mofuta | Mantsoe a akaretsang bakeng sa dynamic trust modules | Ts'ebetsong ea TPM ea firmware e khethehileng ea Intel |
| E thehiloe ho Hardware? | E ka ba hardware kapa firmware-based | Firmware e thehiloe feela |
| Morekisi | Tse ngata (Intel, AMD, Arm, joalo-joalo) | Intel feela |
| TPM ho latela melao | E amanang kapa e atolositsoe ho tsoa ho menahano ea TPM | TPM 2.0 e lumellana ka botlalo |
| Sepheo se seholo | Mefuta e tsoetseng pele ea ts'epo, ts'ireletso ea nako ea ho sebetsa | Numella likarolo tse tloaelehileng tsa TPM |
Sebelisa Maemo le Likopo
Kajeno, theknoloji ea TPM ke senotlolo sa litšebeliso tse ngata. E kenyelletsa fTPM le dTPM. E bohlokoa bakeng sa polokelo e sireletsehileng ea lisebelisoa. Sena se boloka data ea hau e bolokehile.
TPM e boetse e thusa ka boot bo lekantsoeng. Sena se etsa bonnete ba hore sistimi ea hau e qala ka mokhoa o sireletsehileng. Hoa hlokahala bakeng sa ho lumellana le Windows 11.
Likhoebong, TPM e bohlokoa bakeng sa ho kenyelletsa lisebelisoa le taolo ea bohlokoa. E boloka data e bolokehile, ebang ke sesebelisoa se le seng kapa marang-rang kaofela.
Tšebeliso e 'ngoe e kholo ke ho emisa ho senya hardware. TPM e ka bona ha motho e mong a leka ho senya thepa ea hau. Sena ke sa bohlokoa haholo libakeng tseo ts'ireletso e leng ntho e kholo.
TPM e boetse e ntle bakeng sa libaka tse ling tse ngata. Li-smartphone le matlapa li e sebelisa bakeng sa polokelo e sireletsehileng. E etsa hore basebelisi ba ikutloe ba sireletsehile. Ka likoloing, TPM e boloka litsamaiso tse ka har'a sekepe li bolokehile ebile li utloahala.
| Sebaka sa Kopo | Karolo ea TPM | Melemo |
| Lisebelisoa tsa Bareki | Polokelo e Sireletsehileng | E sireletsa lintlha tsa mosebelisi le data ea hau |
| Tšireletso ea Khoebo | Sesebediswa Encryption | E netefatsa hore data eohle e bolokiloeng e sirelelitsoe ka mokhoa o sireletsehileng |
| Sistimi ea Ts'ebetso | Measured Boot | E netefatsa tikoloho ea software nakong ea boot |
| Mekhoa ea Liindasteri | Hardware Tampering Ho lemoha | E thibela liphetoho tse sa lumelloeng ho hardware |
| Tsa makoloi | Tšireletso ea Firmware | E boloka botšepehi ba litsamaiso tse tsamaeang ka koloi |
Mathata a Tšireletso le Bofokoli
Lefatšeng la Theknoloji ea Trusted Platform Module (TPM), ho lokisa bofokoli ba ts'ireletso ke ntho ea bohlokoa. Ka bobeli firmware TPM (fTPM) le discrete TPM (dTPM) li tobane le mathata a ts'ireletso. Litšokelo tse kang litlhaselo tsa kanale e ka thōko le ho sunya linotlolo li ka utsoa lintlha tsa bohlokoa.
Litlhaselo tsa TPM li lebisa setsing se tšepahalang sa komporo ea sistimi. Ba sebelisa litšitšili tsa software le ho ba kotsing ea hardware. Bahlaseli ba lekanya matla kapa ho lutla ha motlakase ho fumana linotlolo tsa lekunutu - mokhoa o bitsoang key sniffing.
Ho boloka firmware ea TPM e ntse e le teng ho bohlokoa. Lintlafatso li lokisa liphoso tsa software le ho matlafatsa ts'ireletso ea TPM. Empa, esita le liphoso tse nyenyane li ka baka mathata a maholo a tšireletso.
Ho bohlokoa ho tseba bofokoli bohle ba ts'ireletso le ho bo laola hantle. Likhamphani li tlameha ho loana khahlanong le litlhaselo tse ncha tsa TPM. Ba hloka ho boloka ts'ireletso ea bona e le matla khahlanong le ts'oaetso ea hardware le litšokelo tse ling tsa TPM. Ka boiteko bo tsoelang pele, likotsi li ka fokotsoa haholo, tsa sireletsa data le litsamaiso tsa bohlokoa hantle.
Mekhoa ea Bokamoso ho Theknoloji ea TPM
Theknoloji ea TPM e ntse e hōla ka potlako, e fallela libakeng tse ncha tse kang virtualization le lits'ebeletso tsa maru. Karolo ea TPM ea ho boloka thepa e bolokehile e ntse e hola. E se e sebelisoa libakeng tse fumanehang habonolo le komporong ea maru ho sireletsa data le lits'ebetso.
Lintlafatso tse sireletsehileng tsa firmware ke mokhoa o mong o moholo. TPM e thusa ho netefatsa hore ke software e tšepahalang feela e kentsoeng. Sena ke senotlolo sa lisebelisoa tse sebelisang li-sensor tse sireletsehileng le IoT, ho li boloka li bolokehile ebile li sebetsa hantle.
Theknoloji ea TPM le eona e ntse e ntlafala ho encryption. Sena se bolela polokelo ea data e sireletsehileng haholoanyane le ho arolelana.
Li-TPM li tla tloha li ts'ehetsa mefuta e mengata ea li-encryption, e etsa hore e sireletsehe le ho feta. Lintlafatso ho firmware ea TPM li tla e thusa ho tsamaisana le lefatše la rona la dijithale.
Rackmount PC
Embedded Computing
Lik'homphieutha tse nkehang habonolo tsa indasteri
Matlapa a Mangata
Laptop e thata
Indasteri Panel PC
Handheld e matsutla
Advantech Industrial PC
