一种云计算适用的虚拟可信报告根构建机制

发布时间：2018-04-23 06:37

本文选题：可信计算 + 虚拟化　；参考：《工程科学与技术》2017年02期

【摘要】：可信计算技术能够为云计算基础设施提供可信赖的状态及其验证手段,而可信报告这一可信平台基础功能在云环境的实现与普通主机有较大差异,如何构建虚拟可信报告根还没有通用和成熟的方案,将影响远程证明等可信技术在云环境的应用。为构建云计算适用的可信计算体系结构,解决为虚拟机提供唯一性身份标志和反映虚拟机与物理宿主机统一的完整性状态问题,明确了虚拟机应拥有各自独立的基于秘钥的身份标志以及虚拟机所属平台配置寄存器(PCR)类敏感信息必须是受保护的、可迁移的以适应虚拟机迁移需求。由进一步分析可知虚拟机完整性状态应包含以PCR值表示的虚拟机完整性状态和物理平台完整性状态。由此,在集中管理虚拟化/非虚拟化可信计算平台的模型预设条件下,基于国际可信计算组织(TCG)规范提出的身份证明秘钥(AIK)概念进行扩展,提出一种使用虚拟AIK作为虚拟机身份标志,并为每个虚拟机生成由其实际物理平台启动PCR值和虚拟机启动虚拟PCR值连接而成的PCR值的可信报告模型。设计了对应的虚拟PCR值复制机制、完整性报告机制、虚拟机敏感数据管理机制,并与TCG规范中方法进行了对比。该机制在兼容传统AIK验证机制的基础上,能够为每个虚拟机产生独立身份标识,向验证者证明自身完整性状态的同时简化了对虚拟机的验证流程。
[Abstract]:Trusted computing technology can provide reliable state and verification means for cloud computing infrastructure. How to construct a virtual trusted report root is not yet a common and mature scheme, which will affect the application of trusted technologies such as remote certification in cloud environment. In order to build a trusted computing architecture for cloud computing, the problem of providing unique identity flags for virtual machines and reflecting the integrity state of virtual machines and physical hosts is solved. It is clear that the virtual machine should have its own identity flag based on the secret key and the sensitive information of the platform configuration register of the virtual machine must be protected and portable to meet the migration needs of the virtual machine. Further analysis shows that virtual machine integrity state should include virtual machine integrity state and physical platform integrity state represented by PCR value. Therefore, under the presupposition of the model of centralized management of virtualization / non-virtualization trusted computing platform, the concept of identity proof secret key (AIK) is extended based on the TCG-based specification of international trusted computing organization. This paper presents a trusted reporting model using virtual AIK as virtual machine identity flag, and generating a trusted report model for each virtual machine, which is connected by starting PCR value from its actual physical platform and virtual PCR value by virtual machine starting. The corresponding virtual PCR value replication mechanism, integrity reporting mechanism and virtual machine sensitive data management mechanism are designed and compared with the methods in TCG specification. On the basis of compatibility with traditional AIK verification mechanism, this mechanism can generate independent identity for each virtual machine, and it also simplifies the verification process of virtual machine while proving its integrity to the verifier.
【作者单位】：信息保障技术重点实验室;
【基金】：国防重点预研项目资助(10502)
【分类号】：TP309;TP302

【相似文献】