I-FTPM Vs DTPM: Ukukhetha Isixazululo Esilungile se-TPM
2024-09-30 15:04:37
Okuqukethwe
Esikhathini samanje sedijithali, kubalulekile ukugcina ihadiwe iphephile nolwazi olubucayi luvikelekile. Lo msebenzi ugxile kubuchwepheshe be-Trusted Platform Module (TPM). Kubalulekile ukuvikela impahla yethu yedijithali. Ukwazi umehluko phakathi kwe-firmware TPM (fTPM) ne-Discrete TPM (dTPM) kubalulekile.
Ubuchwepheshe be-TPM buyisisekelo semisebenzi eminingi yokuvikela efana nokuqaliswa okuvikelekile nokuphathwa kokhiye wokubethela. Kokubili i-fTPM ne-dTPM zinamandla azo ezidingo ezahlukene zokuphepha. Sizobheka i-TPM 2.0 nezinye intuthuko ukuze sikusize ukukhethele imojuli yokuphepha engcono kakhulu.
Okuthathwayo Okubalulekile
Ubuchwepheshe be-TPM bubalulekile ekuvikeleni ihadiwe nokuphatha okhiye bokubethela.
I-FTPM ihlanganisa ukusebenza kwe-TPM ku-firmware ekhona.
I-DTPM inikezela ngemojula yokuvikela ezinikele yokuvikela okuthuthukisiwe.
Ukukhetha phakathi kwe-fTPM ne-dTPM kuncike ezimfuneko zokuphepha ezithile.
Ukuqonda i-TPM 2.0 kubalulekile ekusetshenzisweni kokuphepha kwesimanje.
Kokubili i-fTPM ne-dTPM zisekela izinqubo zokuqalisa ezivikelekile kanye nesitoreji sokuqinisekisa.
Yini i-TPM?
I-Trusted Platform Module (TPM) iyi-chip ekhethekile esiza ukugcina ikhompuyutha yakho iphephile. Isebenzisa okhiye abayimfihlo ukuze bavikeleke. Le chip iwukhiye wokusetha ikhompyutha ephephile.
Ama-TPM adlala indima enkulu ebhuthini evikelekile. Benza isiqiniseko sokuthi isoftware ephephile kuphela iyaqala. Lokhu kuvimbela izinto ezimbi ukuthi zingangeni.
Ziphinde zisize ekugcineni idatha yakho iphephile. Nge-BitLocker, ama-TPM aqinisekisa ukuthi amafayela akho akhiyelwe ngokuqinile. Ngisho noma umuntu ethatha i-hard drive yakho, akakwazi ukungena.
Ama-TPM alandela imithetho eqinile yokucaciswa kwe-TPM. Inguqulo ye-TPM 2.0 ingcono nakakhulu. Yengeza izici ezintsha zokuphepha zamakhompyutha aphephile.
Inkumbulo ye-TPM igcina ulwazi olubalulekile luphephile, nanoma ikhompuyutha yakho ivaliwe. Lena into enkulu yokugcina idatha iphephile.
Ama-TPM awusizo ikakhulukazi ezinkampanini ezinkulu. Basiza ukugcina amakhompyutha ephephile kubantu ababi. Lokhu kwenza isiqiniseko sokuthi amakhompyutha athembekile.
| Isici | Incazelo |
| Secure Boot | Iqinisekisa ubuqotho be-firmware nesofthiwe ngesikhathi sokuqalisa. |
| Ukuvikelwa Kwedatha | Ithuthukisa izixazululo zokubethela njenge-BitLocker ngokuthola okhiye be-cryptographic. |
| TPM 2.0 Ukucaciswa | Kufaka phakathi ukusekelwa kwebanga elibanzi lama-cryptographic algorithms kanye nezivumelwano zokugunyazwa ezinwetshiwe. |
| Inkumbulo Engaguquguquki | Iqinisekisa ukugcinwa kwedatha yokuvikela ebalulekile nanoma isistimu ivaliwe. |
Ukuqonda i-fTPM (Firmware TPM)
I-Firmware TPM, noma i-fTPM, iyindlela yokwengeza i-TPM ku-firmware yedivayisi. Isebenzisa izingxenye ezivikelekile ze-CPU, njenge-Intel's Platform Trust Technology (PTT) ne-TrustZone ye-ARM. Lokhu kudala indawo ephephile yemisebenzi yezokuphepha.
A. Uhlolojikelele lwe-fTPM
Ukuba ne-TPM esekelwe ku-firmware kusho ukuthi awekho ama-chips e-TPM engeziwe adingekayo. Lokhu konga isikhala nemali. Izixazululo ezifana ne-Intel PTT ne-AMD fTPM zenza ukuphatha izimfihlo kube lula ngokufaka i-TPM ku-firmware.
B. Izici Ezibalulekile Nezinzuzo ze-fTPM
1.Izindleko Ezisebenzayo: Awekho ama-chips e-TPM engeziwe asho imali encane esetshenzisiwe.
2.Ukuphatha Okusakazwayo: Kulula ukuphatha imisebenzi ye-TPM uma iku-firmware.
3.Ukuvikeleka Okuthuthukisiwe: Isebenzisa i-ARM TrustZone, i-fTPM yengeza ukuzivikela okuqinile ezinsongweni.
C. Ukukhathazeka Kwezokuphepha kanye Nokukhubazeka
Ngisho nezinzuzo zayo, i-fTPM ibhekana nezinselele. Iziphazamisi noma izinkinga ngokusayinda kwe-firmware zingenza buthaka ukuphepha kwayo. Kubalulekile ukugcina ukuthuthukiswa kokuphepha ukuze ugcine i-fTPM ithembekile.
Ukuqonda i-dTPM (Discrete TPM)
Ukwethulwa kwe-Discrete TPM, noma i-dTPM, kuyisinyathelo esikhulu esiya phambili ekuvikelekeni kwesistimu. Ngokungafani ne-firmware TPM, okuyisofthiwe ekuphrosesa eyinhloko yedivayisi, i-dTPM iyimojula ehlukile, ebonakalayo. Le hardware iwukhiye wokuphatha ngokuphephile okhiye bokubethela kanye nokuthuthukisa ukuphepha kwesistimu.
A. Uhlolojikelele lwe-dTPM
I-dTPM iyingxenye ehlukile eyakhelwe ebhodini lomama lesistimu. Ukubekwa kwayo ngokomzimba kuyenza ibe idivayisi ezimele, ekwazi ukumelana nokuphazamiseka. Igcina okhiye bokubethela nezinqubo ziphephile ku-CPU eyinhloko, okwenza amasistimu aphephe kakhudlwana.
B. Izici Eziyinhloko Nezinzuzo ze-dTPM
I-dTPM igqamile ngokubethela kwayo okuqinile kwehadiwe ngokusebenzisa chip ye-TPM ezinikele. Le chip isebenza njengemojula ye-cryptographic, egcina idatha iphephile. Idizayini yayo ekwazi ukumelana nokuphazanyiswa iphinde ivikele ekuhlaselweni ngokomzimba. Futhi, ingathola isitifiketi se-FIPS, okubonisa ukuthi ihlangabezana nezindinganiso eziqinile zokuphepha.
Ukubethela kwezingxenyekazi zekhompuyutha ezinikezelwe: Iqinisekisa ukuphepha kwezinga eliphezulu.
Ukuhlanganiswa kwemojuli ye-Cryptographic: Isiza ukuphatha okhiye ngokuvikelekile.
Idizayini imelana ne-tamper: Ivikela ekwephuleni umthetho.
Amandla okuthola isitifiketi se-FIPS: Iqinisekisa ukuhambisana nemibandela yokuphepha eqinile.
C. Ukucatshangelwa Kwezokuphepha
Ukuqonda ukuvikeleka okwengeziwe kwe-dTPM kubalulekile. Imvelo ye-TPM chip iyenza ivikeleke kakhulu ezinsongweni ze-inthanethi. Kodwa, kubalulekile futhi ukugcina i-dTPM ngokwayo iphephile ekufinyeleleni okungagunyaziwe.
Ukwengeza i-dTPM ohlelweni kusho ukuyihlanganisa njengengxenye ezinikele. Lokhu kuthuthukisa ukuvikeleka kokubethela futhi kuvikela ezingozini ezivamile zesofthiwe.
| Izimfanelo | I-dTPM |
| Uhlobo | Imojula Yomzimba |
| Umsebenzi | I-Hardware Encryption |
| Ezokuphepha | I-Tamper-Resistant |
| Isitifiketi | Isitifiketi se-FIPS Okungenzeka |
Ukuqhathanisa i-fTPM ne-dTPM
Ukukhetha phakathi kwe-fTPM ne-dTPM kusho ukubuka izinto eziningi. Lokhu kufaka phakathi indlela ezisebenza kahle ngayo, ukuphepha kwazo, nokuthi kulula kangakanani ukuzisebenzisa. Ukwazi lo mehluko kusiza abantu ukuthi benze ukukhetha okufanele ngezidingo zabo kukhompyutha ethembekile.
Ukusebenza kanye nesivinini
Uma sikhuluma ngesivinini nokusebenza, sibheka indlela abasebenzisa ngayo ihadiwe nokuthi ingena kahle kangakanani nebhodi lomama. I-fTPM isebenzisa iphrosesa evikelekile ye-CPU, elondoloza imali kodwa engase ibambezele isistimu ngaphansi komthwalo osindayo.
Ukuvikeleka kuyisihluthulelo kumamojula weplathifomu ethenjwayo. I-dTPM igqamile ngoba ineyunithi yayo yehadiwe ehlukile. Lokhu kukwenza kube ngcono ekulweni nokuhlaselwa kanye nokugcina idatha iphephile. Yinhle kakhulu ezindaweni ezidinga ukuvikeleka kwezinga eliphezulu.
Izindleko kanye Nokuqaliswa
Izindleko nokuthi kulula kangakanani ukusetha yizici ezinkulu. I-fTPM yakhelwe ku-CPU, iyenza ishibhe futhi ibe lula ukuyisebenzisa. Kodwa, i-dTPM idinga ihadiwe eyengeziwe, ebiza ngaphezulu. Nokho, inikeza ukuphepha okungcono ezimeni lapho ukugcina idatha iphephile kubalulekile.
I-DTPM vs PTT
1. I-DTPM — I-Dynamic Trust Platform Module
Igama eligcwele: I-Dynamic Trust Platform Module
Incazelo: Itemu elibanzi noma eliqondene nomthengisi eliqondise kubuchwepheshe obuhlinzeka Ngezindawo Zokusayinda Ezithembekile (TEE) noma izimpande eziguquguqukayo zokwethenjwa. Akulona izinga elisemthethweni njenge-TPM kodwa lingabhekisela ezindleleni zokwethenjwa ezithuthukile noma ezisekelwe esikhathini sokusebenza.
Sebenzisa Ikesi:
Ukusungula izimpande eziguquguqukayo zokwethembana
Ukuqinisekiswa kobuqotho bekhodi yesikhathi sokusebenza
Vikela ukhiye wokulondoloza kanye nokusebenza kwe-cryptographic
2.PTT — I-Platform Trust Technology
Igama eligcwele: I-Platform Trust Technology
Umthengisi: Intel
Incazelo: Ukuqaliswa kwe-firmware-based TPM (fTPM) okuhlinzekwe yi-Intel. Inikeza izici zokuphepha ezithobela i-TPM 2.0 ngaphandle kokudinga i-chip ehlukile ye-TPM ebonakalayo.
Sebenzisa Ikesi:
Inika amandla izici ze-TPM njenge-BitLocker, Windows Hello, Secure Boot, njll.
Okujwayelekile kumasistimu e-Intel-based abathengi nawebhizinisi
Kutholwe ku: Intel chipsets, elungisekayo ku-BIOS/UEFI
Ukuqhathanisa Kafushane
| Isici | I-DTPM | I-PTT (Platform Trust Technology) |
| Uhlobo | Itemu elivamile lamamojula we-dynamic trust | Ukuqaliswa kwe-TPM kwe-firmware ethile ye-Intel |
| Isekelwe ku-hardware? | Kungaba ihadiwe noma i-firmware-based | Isekelwe ku-firmware kuphela |
| Umthengisi | Okuningi (Intel, AMD, Arm, njll.) | Intel kuphela |
| Ukuhambisana ne-TPM | Okuhlobene noma okunwetshiwe kusuka kumibono ye-TPM | Ithobela ngokugcwele i-TPM 2.0 |
| Injongo eyinhloko | Amamodeli athembekile athuthukile, ukuphepha kwesikhathi sokusebenza | Nika amandla izici ze-TPM ezijwayelekile |
Sebenzisa Amacala Nezicelo
Namuhla, ubuchwepheshe be-TPM buyisihluthulelo sokusetshenziswa okuningi. Ihlanganisa i-fTPM ne-dTPM. Ibalulekile kwisitoreji esivikelekile kumadivayisi. Lokhu kugcina idatha yakho iphephile.
I-TPM futhi iyasiza nge-boot elinganisiwe. Lokhu kuqinisekisa ukuthi isistimu yakho iqala ngokuphepha. Kudingeka ukuhambisana kwe-Windows 11.
Emabhizinisini, i-TPM ibalulekile ekubethelweni kwedivayisi nokuphathwa kokhiye. Igcina idatha iphephile, kungakhathaliseki ukuthi ikudivayisi eyodwa noma kunethiwekhi yonke.
Okunye ukusetshenziswa okukhulu ukumisa ukuhlukunyezwa kwehadiwe. I-TPM ingabona uma othile ezama ukungcolisa ihadiwe yakho. Lokhu kubaluleke kakhulu ezindaweni lapho ukuvikeleka kuyinto enkulu.
I-TPM nayo inhle kwezinye izindawo eziningi. Ama-smartphone namathebulethi ayisebenzisela ukugcina okuphephile. Kwenza abasebenzisi bazizwe bephephile. Ezimotweni, i-TPM igcina amasistimu angaphakathi ephephile futhi ezwakala.
| Indawo Yesicelo | Indima ye-TPM | Izinzuzo |
| Amadivayisi Abathengi | Isitoreji Esivikelekile | Ivikela imininingwane yomsebenzisi nedatha yomuntu siqu |
| Ukuphepha Kwebhizinisi | Ukubethela Kwedivayisi | Iqinisekisa ukuthi yonke idatha egciniwe ibethelwe ngokuvikelekile |
| Amasistimu Okusebenza | I-Measured Boot | Iqinisekisa imvelo yesofthiwe ngesikhathi sokuqalisa |
| Amasistimu wezimboni | Hardware Tampering Ukutholwa | Ivimbela ukuguqulwa okungagunyaziwe kwehadiwe |
| Ezezimoto | I-Firmware Protection | Igcina ubuqotho bezinhlelo zemoto ezigibele |
Izinselele Zokuvikela kanye Nokukhubazeka
Emhlabeni wobuchwepheshe be-Trusted Platform Module (TPM), ukulungisa ubungozi bokuphepha kubalulekile. Kokubili i-firmware TPM (fTPM) kanye ne-TPM ecacile (dTPM) ibhekana nezinselele zokuphepha. Izinsongo ezinjengokuhlaselwa kwesiteshi esiseceleni kanye nokuhogela okhiye kungantshontsha ulwazi olubucayi.
Ukuhlasela kwe-TPM kuqondise kusisekelo sekhompuyutha esithenjwayo sesistimu. Basebenzisa iziphazamisi zesofthiwe kanye nokuba sengozini kwehadiwe. Abahlaseli bakala amandla noma ukuvuza kukazibuthe ukuze bathole okhiye abayimfihlo - indlela ebizwa ngokuthi ukuhogela ukhiye.
Ukugcina i-firmware ye-TPM isesikhathini kubalulekile. Izibuyekezo zilungisa iziphazamisi zesofthiwe futhi ziqinise ukuphepha kwe-TPM. Kodwa, ngisho namaphutha amancane angabangela izinkinga ezinkulu zokuphepha.
Kubalulekile ukwazi bonke ubungozi bokuphepha futhi ukuphathe kahle. Izinkampani kufanele zilwe nokuhlaselwa okusha kwe-TPM. Kudingeka bagcine ukuzivikela kwabo kuqinile ngokumelene nokuba sengozini kwehadiwe nezinye izinsongo ze-TPM. Ngemizamo eqhubekayo, izingozi zingancishiswa kakhulu, kuvikelwe kahle idatha ebucayi namasistimu.
Amathrendi Azayo kubuchwepheshe be-TPM
Ubuchwepheshe be-TPM bukhula ngokushesha, buthuthela ezindaweni ezintsha ezifana ne-virtualization kanye nezinsizakalo zamafu. Iqhaza le-TPM ekugcineni ihadiwe iphephile liya likhula. Manje isisetshenziswa ezindaweni ezibonakalayo nakukhompyutha yamafu ukuze kuvikelwe idatha nezinhlelo zokusebenza.
Ukuvuselelwa kwe-firmware okuvikelekile kungenye inkambiso enkulu. I-TPM isiza ukuqinisekisa ukuthi isofthiwe ethenjwayo kuphela efakiwe. Lona ukhiye wamadivayisi asebenzisa izinzwa ezivikelekile ne-IoT, ezigcina ziphephile futhi zisebenza kahle.
Ubuchwepheshe be-TPM nabo baba ngcono ekubetheleni. Lokhu kusho ukugcinwa kwedatha okuvikeleke kakhulu nokwabelana.
Ama-TPM maduze azosekela izinhlobo eziningi zokubethela, azenze zivikeleke nakakhulu. Izibuyekezo ze-TPM firmware zizoyisiza ihambisane nomhlaba wethu wedijithali.
I-Rackmount PC
I-Computing Eshumekiwe
I-Industrial Portable Computers
Amathebulethi Aqinile
I-laptop eqinile
I-Industrial Panel PC
Isandla Esimangelengele
I-Advantech Industrial PC
