Method for self adaptedly safeguarding the normal starting of credible client virtual domain

Abstract

The invention relates to a method for self adaptedly safeguarding the normal starting of a credible client virtual domain. The method realizes the safeguarding by increasing the functions of the existing virtual trusted platform module and the integrity measurement software. In the method, the integrity measurement software is loaded by the client virtual domain and then enters into the sleep mode so as to suspend the system starting; until the virtual trusted platform module of a privilege domain comes into operation, the integrity measurement software is aroused and the virtual domain system continously starts. The method not only can safeguard that the credible client virtual domain does not collapse owing to the slow establishment process of the virtual trusted platform module, but only maintains that the original system makes the best of system resources on one hand and maintains the response speed of the original system on the other hand by adopting an event driving operating mode and postponing the suspending of the starting process of the virtual domain before the initializing part of the virtual domain software of a first access virtual trusted platform module.

Description

technical field [0001] The invention relates to the field of trusted computing for computer information security, in particular to an adaptive method, which maintains the effective utilization rate of original system resources and system response speed while ensuring the normal startup of trusted client virtual domains. Background technique [0002] The virtual machine technology applies the concept of virtualization of the whole machine, which removes the constraints of the compatibility of the physical machine and hardware resources on the application program, and realizes the parallel operation of multiple operating systems on the same hardware platform. In the network era, the existing PC system, which is designed with efficiency first rather than security first, is more and more vulnerable to attacks from hackers, spyware and viruses. In order to solve the problem of insecure PC structure and fundamentally improve its credibility, the Trusted Computing Platform Alliance...

AI Technical Summary

Problems solved by technology

Traditional trusted computing technology can only guarantee the security of a single computer. In order to realize the seamless operation of trusted application software on the customer's virtual domain, two problems must be solved: one is how to provide TPM equipment for the customer's virtual domain; the other is how to Realize the integrity measurement of each stage of the trust chain of the customer's virtual domain

One method is to periodically issue TPM commands until the returned result is correct. This polling detection method is simple, but the interval time of the commands is not easy to set, so this method may slow down the system response speed or waste system resources in a dynamic environment.

Images