This article presents a new type of PKI design methodology based on trust matrix,which aims at shortcoming on traditional PKI trust chain instruction through algebra,and can certificate user license whether trustable or not by means of simple trust matrix computation.

Current trust chain discovery mechanisms spend much time on collecting credentials from many different nodes,and waste many computing resources to verifying the redundant credentials.

The trust structure of a society is made up of three kinds of framework:trust chain,trust circle,and trust network.

To construct Pre-OS chain of trust,message digest and digital signature are used to verify integrity and authenticity of entities in different phases of bootstrap.

In this system,many new techniques are adopted,for example,mechanism of the chain of trust,role-based access control model,two-level of logs,trusted authorization and so on.

Study of trusted chain technology of computing trusted;

Research on mechanism of building trusted chain in Vista

Finally,a detailed design proposal meeting the demand for em-bedded system is proposed from two aspects of root of trust and trusted chain.

So the reality requires us to pay more attention on supply chain trust.

However, the relationship of supply chain trust is more complex, which increases the vulnerability of the trust relationship between supply chains.

So we have to pay more attention on supply chain trust.