Trusted execution method and apparatus for virtual trusted platform module (vTPM)

Abstract

The present invention discloses a trusted execution method and apparatus for a virtual trusted platform module (vTPM). An operating system loads an SGX module, and the operating system runs a first vTPM simulator. The method comprises: the first vTPM simulator run by the operating system sending a first creation request to the SGX module, so that the SGX module establishes a first memory protection region enclave according to the first creation request and generates a first communication key, so as to execute program code of the first vTPM simulator in the first enclave to implement a second vTPM simulator; and the second vTPM simulator using the first communication key to decrypt data subsequently forwarded by the SGX module. According to the method and apparatus disclosed by the embodiments of the present invention, security isolation of a vTPM simulator from a non-trusted operating system is realized by using an SGX module and a hardware protection function of an enclave, thereby ensuring computing security of the vTPM simulator.

Description

technical field [0001] The invention relates to the field of electronic technology, in particular to a trusted execution method and device of a virtual trusted platform module vTPM. Background technique [0002] Due to the advantages of reasonable resource sharing, good isolation mechanism, easy maintenance and low cost, virtualization technology has been widely used, but virtual machine technology also faces problems such as data security storage, sensitive information protection and integrity. measurement issues, etc. The goal of trusted computing technology is to establish a security verification system for computer systems. The TPM (Trusted Platform Module, Trusted Platform Module) embedded on the motherboard of physical equipment can provide hardware-based trusted metrics, trusted proofs and trusted packaging for computer systems. and other safety features. Therefore, the combination of virtualization and trusted computing is an inevitable result of technological deve...

AI Technical Summary

Problems solved by technology

The key-related calculation process of the hardware TPM is credible because they are all executed inside the closed hardware and will not be leaked or tampered with; however, the key generation and encryption and decryption processes of the vTPM implemented by software are all implemented in the host memory. ,like Figure 4 As shown, when malicious code is implanted in the memory of the vTPM emulator and vTPM instance, the key may be leaked, which causes a great security problem

Images