I-FTPM Vs DTPM: Ukukhetha Isisombululo seTPM esiLungileyo
2024-09-30 15:04:37
Isiqulatho
Kule mihla yedijithali, kubalulekile ukugcina i-hardware ikhuselekile kunye nolwazi olubuthathaka. Lo msebenzi ugxile kwi-Trusted Platform Module (TPM) ubuchwepheshe. Kubaluleke kakhulu ukukhusela izinto zethu zedijithali. Ukwazi umahluko phakathi kwe-firmware TPM (fTPM) kunye ne-discrete TPM (dTPM) kubalulekile.
I-TPM tech sisiseko semisebenzi emininzi yokhuseleko efana ne-boot ekhuselekileyo kunye nolawulo lwesitshixo sofihlo. Zombini i-fTPM kunye ne-dTPM zinamandla azo kwiimfuno ezahlukeneyo zokhuseleko. Siza kujonga kwiTPM 2.0 kunye nolunye uphuculo lokukunceda ukhethe eyona modyuli yokhuseleko ilungele wena.
Izinto eziphambili zokuThatha
Itekhnoloji ye-TPM ibalulekile ekukhuseleni i-hardware kunye nokulawula izitshixo ze-encryption.
I-FTPM idibanisa imisebenzi ye-TPM kwi-firmware ekhoyo.
I-DTPM inikezela ngemodyuli yokhuseleko ezinikeleyo yokhuseleko olongeziweyo.
Ukukhetha phakathi kwe-fTPM kunye ne-dTPM kuxhomekeke kwiimfuno ezithile zokhuseleko.
Ukuqonda i-TPM 2.0 kubalulekile ekuphunyezweni kokhuseleko lwangoku.
Zombini i-fTPM kunye ne-dTPM zixhasa iinkqubo zokuqalisa ezikhuselekileyo kunye nokugcinwa kwengqinisekiso.
Yintoni i-TPM?
I-Trusted Platform Module (TPM) yi-chip ekhethekileyo enceda ukugcina ikhompyutha yakho ikhuselekile. Isebenzisa izitshixo ezifihlakeleyo zokhuseleko. Le chip isitshixo sokuseta ikhompyuter ekhuselekileyo.
Ii-TPMs zidlala indima enkulu kwi-boot ekhuselekileyo. Baqinisekisa ukuba kuphela isoftware ekhuselekileyo eqalayo. Oku kuthintela izinto ezimbi ukuba zingangeni.
Bakwanceda ukugcina idatha yakho ikhuselekile. Nge-BitLocker, ii-TPMs ziqinisekisa ukuba iifayile zakho zitshixiwe ngokuqinileyo. Nokuba umntu uthatha hard drive yakho, abakwazi ukungena.
IiTPM zilandela imigaqo engqongqo yenkcazo yeTPM. I-TPM 2.0 version ibhetele ngakumbi. Yongeza iimpawu ezintsha zokhuseleko kwiikhompyuter ezikhuselekileyo.
Imemori ye-TPM igcina ulwazi olubalulekileyo lukhuselekile, naxa ikhompuyutha yakho icinyiwe. Le yinto enkulu yokugcina idatha ikhuselekile.
Ii-TPM ziluncedo kakhulu kwiinkampani ezinkulu. Banceda ukugcina iikhompyuter zikhuselekile kubantu ababi. Oku kuqinisekisa ukuba iikhompyuter zithembekile.
| Uphawu | Inkcazo |
| Khusela i-Boot | Iqinisekisa ukuthembeka kwe-firmware kunye nesoftware ngexesha lokuqalisa. |
| Ukhuseleko lwedatha | Iyaphucula izisombululo zoguqulelo oluntsonkothileyo njengeBitLocker ngokukhusela izitshixo ze-cryptographic. |
| TPM 2.0 Ukucaciswa | Ibandakanya inkxaso yoluhlu olubanzi lwe-cryptographic algorithms kunye neeprothokholi zogunyaziso olwandisiweyo. |
| Inkumbulo engaguquguqukiyo | Iqinisekisa ukugcinwa kwedatha ebalulekileyo yokhuseleko naxa inkqubo icinyiwe. |
Ukuqonda i-fTPM (iFirmware TPM)
I-Firmware TPM, okanye i-fTPM, yindlela yokongeza i-TPM kwi-firmware yesixhobo. Isebenzisa iindawo ezikhuselekileyo ze-CPU, njenge-Intel's Platform Trust Technology (PTT) kunye ne-ARM's TrustZone. Oku kudala indawo ekhuselekileyo yemisebenzi yokhuseleko.
A. Isishwankathelo se-ftPM
Ukuba ne-TPM esekwe kwi-firmware kuthetha ukuba akukho zitshiphu zeTPM ezongezelelweyo ezifunekayo. Oku konga indawo kunye nemali. Izisombululo ezifana ne-Intel PTT kunye ne-AMD fTPM zenza ukulawula iimfihlo kube lula ngokubeka i-TPM kwi-firmware.
B. Iimpawu eziphambili kunye neeNzuzo zefTPM
I-1.Indleko-Esebenzayo: Akukho zitshiphu ze-TPM ezongezelelweyo zithetha imali encinci echithiweyo.
2.Ulawulo olulula: Kulula ukulawula imisebenzi ye-TPM xa ikwi-firmware.
3. Ukhuseleko olomeleziweyo: Ukusebenzisa i-ARM TrustZone, i-fTPM yongeza ukhuseleko oluluqilima kwizoyikiso.
C. IiNgxaki zoKhuseleko kunye nobuthathaka
Nangona iluncedo, i-fTPM ijongene nemingeni. Iibugs okanye imiba ngokusayinwa kwe-firmware inokulwenza buthathaka ukhuseleko lwayo. Kubalulekile ukugcina ukhuseleko oluphuculweyo ukugcina i-fTPM ithembekile.
Ukuqonda i-dTPM (Discrete TPM)
Ukuqaliswa kwe-discrete TPM, okanye i-dTPM, linyathelo elikhulu eliya phambili kukhuseleko lwenkqubo. Ngokungafaniyo ne-firmware TPM, eyisoftware kwiprosesa ephambili yesixhobo, i-dTPM yimodyuli eyahlukileyo, yomzimba. Le hardware ngundoqo wokulawula ngokukhuselekileyo izitshixo ze-encryption kunye nokunyusa ukhuseleko lwenkqubo.
A. Isishwankathelo se-dTPM
I-dTPM yinxalenye eyahlukileyo eyakhelwe kwi-motherboard yenkqubo. Ukubekwa kwayo ngokwasemzimbeni kuyenza ibe sisixhobo esizimeleyo, esinganyangekiyo. Igcina izitshixo ze-encryption kunye neenkqubo zikhuselekile kwi-CPU ephambili, isenza iinkqubo zikhuseleke ngakumbi.
B. Iimpawu eziphambili kunye neeNzuzo ze-dTPM
I-dTPM ibalasele ngoguqulelo oluluqilima lwehardware ngokusebenzisa itshiphu yeTPM ezinikeleyo. Le chip isebenza njengemodyuli ye-cryptographic, igcina idatha ikhuselekile. Uyilo lwayo olukwaziyo ukumelana nokuphazamiseka lukwakhusela nohlaselo lwasemzimbeni. Kwaye, inokufumana isatifikethi se-FIPS, ebonisa ukuba idibana nemigangatho engqongqo yokhuseleko.
Uguqulelo oluntsonkothileyo kwihardware: Iqinisekisa ukhuseleko olukwinqanaba eliphezulu.
Ukudityaniswa kwemodyuli yeCryptographic: Iququzelela ukuphathwa ngokukhuselekileyo kwezitshixo.
Uyilo olunganyangekiyo: Ikhusela ukophulwa komzimba.
Ukubanakho kwesiqinisekiso se-FIPS: Iqinisekisa ukuthotyelwa kwemigaqo yokhuseleko engqongqo.
C. Iingqwalasela zoKhuseleko
Ukuqonda ukhuseleko olongezelelweyo lwe-dTPM ngundoqo. Ubume bokwenyama be-TPM buyenza ikhuseleke ngakumbi kwiisoyikiso ze-cyber. Kodwa, kukwabalulekile ukugcina i-dTPM ngokwayo ikhuselekile kufikelelo olungagunyaziswanga.
Ukongeza i-dTPM kwisistim kuthetha ukuyidibanisa njengenxalenye ezinikeleyo. Oku konyusa ukhuseleko loguqulelo oluntsonkothileyo kwaye ikhusela ngokuchasene nobuthathaka obuqhelekileyo besoftware.
| Iimpawu | I-dTPM |
| Uhlobo | Imodyuli yoMzimba |
| Umsebenzi | Hardware Encryption |
| Ukhuseleko | I-Tamper-Resistant |
| Isiqinisekiso | Uqinisekiso lwe-FIPS Okunokwenzeka |
Ukuthelekisa i-fTPM kunye ne-dTPM
Ukukhetha phakathi kwe-fTPM kunye ne-dTPM kuthetha ukujonga izinto ezininzi. Ezi ziquka indlela ezisebenza kakuhle ngayo, ukhuseleko lwazo, kunye nendlela ekulula ngayo ukuzisebenzisa. Ukwazi lo mahluko kunceda abantu ukuba benze ukhetho olufanelekileyo kwiimfuno zabo kwikhompyuter ethembekileyo.
Ukusebenza kunye nesantya
Xa sithetha ngesantya kunye nokusebenza, sijonga indlela abasebenzisa ngayo i-hardware kunye nokuba ihambelana njani nebhodi yomama. I-fTPM isebenzisa iprosesa ekhuselekileyo ye-CPU, egcina imali kodwa inokucothisa inkqubo phantsi komthwalo onzima.
Ukhuseleko ngundoqo kwiimodyuli zeqonga elithembekileyo. I-dTPM ibalasele kuba ineyunithi yayo yehardware eyahlukileyo. Oku kwenza kube ngcono ekulweni nohlaselo kunye nokugcina idatha ikhuselekile. Ilungile kwiindawo ezifuna ukhuseleko oluphezulu.
Iindleko kunye nokuPhunyezwa
Iindleko kunye nokuba kulula kangakanani ukuseta zizinto ezinkulu. I-fTPM yakhelwe kwi-CPU, iyenza ingabizi kwaye kulula ukuyisebenzisa. Kodwa, i-dTPM idinga i-hardware eyongezelelweyo, ebiza ngaphezulu. Nangona kunjalo, inikezela ngokhuseleko olungcono kwiimeko apho ukugcina idatha ikhuselekile kubalulekile.
DTPM vs PTT
1. I-DTPM — IModyuli yeQonga leTrasti eliDynamic
Igama eliphelele: IModyuli yeQonga leTrasti eDynamic
Intsingiselo: Igama elibanzi okanye elithe ngqo kumthengisi elibhekiselele kubuchwephesha obubonelela ngeeNdawo eziThenjiweyo zokuSebenza (TEE) okanye iingcambu eziguqukayo zentembeko. Ayingomgangatho usesikweni njenge-TPM kodwa unokubhekisa kwiindlela zokuthembela ezikwinqanaba eliphambili okanye lexesha lokusebenza.
Sebenzisa Imeko:
Ukuseka iingcambu eziguqukayo zentembeko
Uqinisekiso lwengqibelelo yekhowudi yexesha lokubaleka
Khusela ugcino olungundoqo kunye nokusebenza kwe-cryptographic
2.PTT — I-Platform Trust Technology
Igama eliphelele: I-Platform Trust Technology
Umthengisi: Intel
Ingcaciso: Ukuphunyezwa kwe-firmware-based TPM (fTPM) ebonelelwe yi-Intel. Inika i-TPM 2.0-ehambelanayo neempawu zokhuseleko ngaphandle kokufuna i-chip ye-TPM yomzimba eyahlukileyo.
Sebenzisa Imeko:
Yenza i-TPM isebenze njenge-BitLocker, iWindows Hello, i-Secure Boot, njl.
Ixhaphakile kwiinkqubo ezisekelwe kubathengi nakwishishini le-Intel
Ifunyenwe kwi: Intel chipsets, iqwalaselwe kwi-BIOS/UEFI
Uthelekiso lwesishwankathelo
| Uphawu | DTPM | I-PTT (i-Platform Trust Technology) |
| Uhlobo | Ixesha eliqhelekileyo kwiimodyuli zokuthembela eziguqukayo | Ukuphunyezwa kwe-TPM ye-Intel ye-firmware ethile |
| Isekwe kwi-Hardware? | Inokuba yi-hardware okanye i-firmware-based | I-Firmware-based kuphela |
| Umthengisi | Ezininzi (Intel, AMD, Arm, njl.) | Intel kuphela |
| TPM ukuthobela | Eyeleleneyo okanye eyandisiweyo ukusuka kwimiba ye-TPM | Ngokupheleleyo TPM 2.0 iyahambelana |
| Injongo ephambili | Iimodeli zokuthembela okuphezulu, ukhuseleko lwexesha lokusebenza | Nika amandla iimpawu zeTPM ezisemgangathweni |
Sebenzisa Amatyala kunye nezicelo
Namhlanje, itekhnoloji yeTPM ingundoqo kusetyenziso oluninzi. Ibandakanya i-fTPM kunye ne-dTPM. Ibalulekile kugcino olukhuselekileyo kwizixhobo. Oku kugcina idatha yakho ikhuselekile.
I-TPM ikwanceda ngokulinganisa ukuqalisa. Oku kuqinisekisa ukuba inkqubo yakho iqala ngokukhuselekileyo. Kuyimfuneko kwi-Windows 11 ukuhambelana.
Kumashishini, iTPM ibalulekile kufihlo lwesixhobo kunye nolawulo oluphambili. Igcina idatha ikhuselekile, nokuba ikwisixhobo esinye okanye ikwinethiwekhi epheleleyo.
Olunye usebenziso olukhulu kukuyeka ukonakala kwehardware. I-TPM inokubona xa umntu ezama ukumosha ngehardware yakho. Oku kubaluleke kakhulu kwiindawo apho ukhuseleko luyinto enkulu.
TPM kwakhona enkulu kwezinye iindawo ezininzi. Ii-smartphones kunye neetafile zisetyenziselwa ukugcina ngokukhuselekileyo. Yenza abasebenzisi bazive bekhuselekile. Kwiimoto, i-TPM igcina iinkqubo ze-onboard zikhuselekile kwaye zivakala.
| Indawo yesicelo | Indima yeTPM | Iingenelo |
| Izixhobo zabathengi | Ugcino olukhuselekileyo | Ikhusela iziqinisekiso zomsebenzisi kunye neenkcukacha zomntu |
| Ukhuseleko lweShishini | Uguqulelo oluntsonkothileyo lwesixhobo | Iqinisekisa ukuba yonke idatha egciniweyo ifihliwe ngokukhuselekileyo |
| Iinkqubo zokuSebenza | I-Measured Boot | Iqinisekisa imeko yesoftware ngexesha lokuqalisa |
| IiNkqubo zoShishino | Ukuxhatshazwa kweHardware Ukufunyanwa | Ithintela ukuguqulwa okungagunyaziswanga kwihardware |
| Iimoto | Ukhuseleko lweFirmware | Ugcina imfezeko yeenkqubo ezikwisithuthi |
Imingeni yoKhuseleko kunye nobuthathaka
Kwihlabathi le-Trusted Platform Module (TPM) ubuchwepheshe, ukulungisa ubuthathaka bokhuseleko ngundoqo. Zombini i-firmware TPM (fTPM) kunye ne-TPM ecacileyo (dTPM) ijongene nemingeni yokhuseleko. Izoyikiso ezinje ngohlaselo lwesitishi esisecaleni kunye nokufutha okungundoqo kunokuba ulwazi olubuthathaka.
Uhlaselo lwe-TPM lujolise kwisiseko sekhompuyutha ethembekileyo yenkqubo. Basebenzisa iibugs zesoftware kunye nokuba sesichengeni sehardware. Abahlaseli balinganisa amandla okanye ukuvuza kombane ukuze bafumane izitshixo ezifihlakeleyo – indlela ebizwa ngokuba kukusezela isitshixo.
Ukugcina i-firmware ye-TPM isexesheni kubalulekile. Uhlaziyo lulungisa iibugs zesoftware kunye nokunyusa ukhuseleko lweTPM. Kodwa, neempazamo ezincinci zinokubangela iingxaki ezinkulu zokhuseleko.
Kubalulekile ukwazi bonke ubuthathaka bokhuseleko kwaye ulawule kakuhle. Iinkampani kufuneka zilwe nohlaselo olutsha lweTPM. Kufuneka bagcine ukhuseleko lwabo lomelele ngokuchasene nokuba semngciphekweni kwehardware kunye nezinye izoyikiso zeTPM. Ngemigudu eqhubekayo, imingcipheko ingancitshiswa kakhulu, ukukhusela idatha ebuthathaka kunye neenkqubo kakuhle.
IiNdlela ezizayo kwiTekhnoloji yeTPM
Itekhnoloji ye-TPM ikhula ngokukhawuleza, ifudukela kwimimandla emitsha efana ne-virtualization kunye neenkonzo zamafu. Indima ye-TPM ekugcineni i-hardware ikhuselekile iya isiba nkulu. Ngoku isetyenziswa kwindawo ebonakalayo kunye necomputing yamafu ukukhusela idatha kunye nee -apps.
Uhlaziyo olukhuselekileyo lwe-firmware ngomnye umkhwa omkhulu. I-TPM inceda ukuqinisekisa ukuba kuphela isoftware ethenjiweyo efakiweyo. Oku kungundoqo kwizixhobo ezisebenzisa i-sensor ezikhuselekileyo kunye ne-IoT, zigcina zikhuselekile kwaye zisebenza kakuhle.
Itekhnoloji ye-TPM nayo iya ibangcono kwi-encryption. Oku kuthetha ukugcinwa kwedatha ekhuselekileyo kunye nokwabelana.
Ii-TPMs kungekudala ziza kuxhasa iintlobo ezininzi zofihlo, zizenze zikhuseleke ngakumbi. Uhlaziyo lwe-firmware ye-TPM luya kuyinceda ihambelane nehlabathi lethu ledijithali.
I-PC yeRackmount
Embedded Computing
IiKhompyutha eziphathwayo zoShishino
Amacwecwe aMagingxigingxi
ILaptop eRhagedle
Ipaneli yePC yoShishino
I-Handheld Emagingxigingxi
I-Advantech Industrial PC
