Abstract: Measurement applications such as trade settlement require their metrological software and running environment protected against unauthorized modifications from attackers including management user, which is nevertheless not fully supported by the existing secure models. A measurement-oriented software protection model named MBSPM was proposed. Role-domain-type access control strategy was adopted to support authorization of data access permissions to software modules. Mandatory access control was employed to enforce multi-level data protection and separation of legal relevant software. Integrity of system software was validated by use of Trusted Platform Module (TPM). And unauthorized modification on metrology parameters was prevented with tamper-proof storage. The experimental results with a virtual weighing system show that MBSPM supports software protection features required by metrological applications. Compared with the situation without enforcing MBSPM, except for that the startup time increases by about 50%, execution speed of opening files and starting application drops by no more than 20%.

Key words: software protection, security model, trusted computing, metrology and measurement control, operation beyond authority

摘要： 贸易结算等测量应用要求计量软件及运行环境能有效防范包括管理员在内的各类用户的非授权篡改，但难以得到现有安全模型的有效支持。为此提出面向测量应用的软件保护模型MBSPM，基于角色—域—型访问控制策略分配数据访问权限，利用强制访问控制实施数据分级保护和法制相关软件隔离，依靠防篡改存储防止计量参数的非授权修改，基于可信平台模块(TPM)保护运行环境的完整性。基于虚拟称重系统的应用实例表明，MBSPM可支持计量应用所要求的软件保护特性，与不实施MBSPM的情况相比较，除系统启动时间增加大约50%之外，文件打开和应用启动等操作的速度下降均不超过20%。

关键词: 软件保护, 安全模型, 可信计算, 计量测控, 越权操作