基于无证书环签名的虚拟机可信证明方案

发布时间：2018-01-21 17:24

本文关键词： 虚拟机可信证明无证书公钥系统环签名云计算　出处：《计算机应用》2017年02期 　论文类型：期刊论文

【摘要】：由于虚拟环境的复杂性和动态性,使用传统方法证明其安全状态时会出现运算效率低下的情况;而环签名具有运算效率高、匿名性强的特点,利用无证书公钥系统可解决密钥管理问题。为此,提出一种采用无证书环签名机制的虚拟机可信证明方案。私钥生成中心(PKG)验证平台物理环境的状态可信后,由PKG和虚拟可信平台模块(v TPM)管理器利用无证书算法共同生成v TPM签名密钥,虚拟机对外证明时采用环签名机制,将证明者的信息隐藏在环成员列表中,从而实现虚拟机对外的匿名身份证明和状态证明。在完成证明准备工作后,虚拟机不需要在每次证明和迁移时重复生成虚拟身份证明密钥(v AIK)证书,因此大大提高了证明效率;另外方案具有很强的安全性和匿名性,适用于虚拟机数量巨大的云计算环境。
[Abstract]:Because of the complexity and dynamics of the virtual environment, the computational efficiency will be low when the traditional method is used to prove the security state of the virtual environment. The ring signature has the characteristics of high computational efficiency and strong anonymity. The problem of key management can be solved by using the certificate-free public key system. This paper presents a trusted certification scheme for virtual machine (VM) using certificate free ring signature mechanism. The private key generation center (PKG) verifies the state trust of the platform's physical environment. V TPM signature key is generated by PKG and virtual trusted platform module (VTPM) manager using non-certificate algorithm, and the ring signature mechanism is used when the virtual machine is certified to the outside. The information of the verifier is hidden in the list of ring members, so that the anonymous identity proof and the state proof of the virtual machine are realized. The virtual machine does not need to generate the virtual identity key vAIK-certificate repeatedly every time it is authenticated and migrated, so the efficiency of proof is greatly improved. In addition, the scheme has strong security and anonymity, which is suitable for cloud computing environment with a large number of virtual machines.
【作者单位】：信息工程大学;北京工业大学信息学部;
【基金】：国家863计划项目(2015AA016002)~~
【分类号】：TP302;TP309
【正文快照】： 0引言虚拟化技术是云计算的核心支撑技术之一,虚拟化平台将计算、存储、网络等实体资源抽象出来,实现了资源的动态分配、跨域共享、灵活调度,从而以更高效的组合方式对外提供服务,能够显著提高硬件资源的利用效率和软件的可移植性,因而得到了快速的应用推广。云计算服务中,用

【参考文献】