本文介绍了可信安全理念和应用设计示例。可信安全简要概括为通过结构化的可信计算基、可信安全工程化等可信安全机制,保证系统安全机制具有期望的功能以及来源的真实性、机制自身的不可旁路和防篡改能力。结构化可信计算基也增加了系统安全功能机制形式化描述的可行性,从而提高人们对系统安全的信心。 This article introduces examples of trusted security concepts and application design. Trusted security is briefly summarized as credible security mechanisms such as trustworthy security engineering and trusted trusted security mechanisms to ensure that the system security mechanism has the expected functions and authenticity of sources, and that the mechanism itself can not be bypassed and has tamper resistance . Structured trustworthy computing base also increases the possibility of a formal description of the system security functional mechanisms, thereby increasing people’s confidence in system security.