Trusted measurement system and method for cloud hosts

Abstract

The invention provides a trusted measurement system and method for cloud hosts. According to the system and method, a virtual trusted platform module is configured in virtual environment, trusted measurement is carried out on physical environment through a trusted platform module, trusted measurement is carried out on the virtual environment through the virtual trusted platform module, and a complete trusted chain from a physical machine to a virtual machine is constructed, so that trusted completeness verification for the physical environment and the virtual environment of a cloud host can berealized; and the constructed trusted chain does not depend on the trusted platform module of the physical machine, so that when the virtual machine is migrated, a space for storing measurement values of the virtual machine is divided in a virtual PCR register of a target host machine, measurement values of the physical machine of the target host machine are copied to a corresponding bit of the virtual PCR register, and when the virtual machine is started, the virtual machine is measured and the measurement value is stored in the corresponding bit of the virtual PCR register, so as to complete trusted chain reconstruction of the migrated virtual machine. The system and method are extremely good in transportability and can be widely applied to cloud computation platforms.

Description

technical field [0001] The invention relates to a trusted measurement system and method of a cloud host, belonging to the technical field of information security. Background technique [0002] At present, the cloud computing platform has become the main basic computing platform, and the cloud host includes the physical environment built by physical machines and the virtual environment built by virtual machines. In order to ensure the credibility of the cloud computing platform, it is necessary to ensure the credibility of both the physical environment and the virtual environment. In this way, the integrity measurement of the cloud computing platform includes both the credibility measurement of the physical environment and the credibility measurement of the virtual environment. . The Chinese invention patent application with the application number 201510513472.1 discloses a method for constructing a virtualized trusted server trust chain, which uses the trusted platform modu...

AI Technical Summary

Problems solved by technology

[0003] The above-mentioned disclosed technical solution completely relies on the trusted platform module to measure the integrity of the physical machine and virtual machine of the cloud host. When the virtual machine needs to be migrated and other operations, the integrity of the trust chain will be destroyed, and the integrity of the virtual machine cannot be guaranteed. Trustworthy, not portable, not widely applicable in cloud computing platforms

Images