METHOD FOR ESTABLISHING A TRUSTED RUNNING ENVIRONMENT IN THE COMPUTER

摘要

The present invention discloses a method for establishing a trusted running environment in the computer, the key of the invention is that the trusted file authentication module, the trusted process memory code authentication module are set in the OS, the secured OS is loaded and ran. The trusted file authentication module intercepts all of the file operation action, and processes the file according to the file operation type if the operation action is to the trusted file, or operates the file after verifies the eligibility for the file if the operation action is to the untrusted file. The trusted process memory code authentication module authenticates every fixed time whether the running state and the integrality for all of the process code are normal, and gives the alarm if abnormal, closes up and repairs the process after saves the field data ran by process, otherwise runs normally. Applying the present invention, whether the file and the process themselves are attacked is detected, thus the secure for the computer running environment is ensured whether the attack of known or unknown virus exists or not, and the application for user is convenience, the cost of realizing is low.