Method for remote dynamic verification on integrality of client software

Abstract

The invention provides a method for remote dynamic verification on integrality of client software. In the method, a TCG (Trusted Computing Group) remote verification method, an Xen virtual machine security isolation property and a Trusted Platform Module (TPM) timestamp function are adopted to realize remote dynamic verification of a network server on self-contained executables of a network client untrusted client virtual domain. The network client is configured with a security chip TPM (Trusted Platform Module) and an Xen virtual machine system is also installed. A remote dynamic verification framework adopted by the method comprises three parts of an integrality measuring mechanism, a reporting mechanism and a verification mechanism, wherein the integrality measuring mechanism is completed by a back-end verification agent module installed in a network client privileged virtual domain and a memory measuring module installed in a network client virtual machine monitor; the reporting mechanism is completed by a front-end verification agent module installed in the network client virtual domain; and the verification mechanism is completed by a verification module installed d in the network server.

Description

technical field [0001] The invention relates to a method for remotely and dynamically verifying the integrity of client software, belonging to the field of computer information security. Background technique [0002] At present, many attack methods that damage terminals are implemented by injecting various forms of malicious codes such as viruses, worms, spyware, and phishing software rather than by damaging secure channels. Therefore, the security of communication endpoints is an issue that cannot be ignored. For this reason, many network services such as online banking usually need to remotely verify the integrity of client-related software before providing services to clients, so as to ensure that they are serving legitimate clients. This verification process is called remote certification or remote verification. The verification object of the remote attestation may be the application software file, or the data in the program code segment, program data segment, program st...

AI Technical Summary

Problems solved by technology

[0005] Currently in the published literature (including patents), only the literature (Remote attestation on legacy operating systems with trusted platform modules; Dries Schellekens, Brecht Wyseur, Bart Preneel; Electronic Notes in Theoretical Computer Science, Volume197, Issue 1, February 2008) will TPM time Stamping technology is applied to realize remote proof that has nothing to do with the operating system, that is, it does not need to modify the operating system where the verified file is located; although the method proposed in this document solves some problems in the Pioneer scheme, in this method, the The trusted base of verified software has security risks

Images