基于现实会议中席位的分配与共享规则,抽象出能用于射频优卡的席位约束会议模型.基于会议模型分析射频优卡多芯片操作系统(COS)安全问题,给出安全实体的符号化描述和安全需求的形式化定义,建立了COS、存储块和独立存储区的有限状态机模型,并复合这3个模型建立了多COS安全的有限状态机模型.给出了安全模型的原型系统设计及其功能仿真和现场可编程门阵列(FPGA)实现.仿真结果表明该安全模型结构简单,易于实现,具有很好的数据安全性. Based on the rules of allocation and sharing of seats in real conferences, a conference-constrained conference model that can be used for radio-frequency premium cards is abstracted.The symbolic description of security entities is given based on the conference model’s analysis of the security issues of the radio frequency multi-chip operating system (COS) And a formal definition of security requirements, a finite state machine model of COS, storage blocks and independent storage areas is established, and the finite state machine model of multi-COS security is established by compounding the three models. The prototype system design of the security model is given And its function simulation and field programmable gate array (FPGA) implementation.The simulation results show that the security model is simple in structure, easy to implement and has good data security.