A virtual disk integrity protection system and method based on a trusted cryptographic module

Abstract

The invention discloses trusted cryptography module based system and method for protection of virtual disk completeness, and belongs to the technical field of information security. The trusted cryptography module based system comprises a virtual disk management module, a virtual disk measurement module, a virtual disk verification module, a trusted cryptography module and a trusted memory device. The virtual disk management module is used for generating and identifying virtual disk container files, and loading the virtual disk container files to turn into a virtual disk recognizable by a system. The method includes: initializing hardware devices required by the system, establishing a new virtual disk, establishing a standard metric for the virtual disk, verifying completeness of the virtual disk, and loading or not loading the virtual disk and updating the metric in unloading of the virtual disk according to verification results. By the system and the method compared with the prior art, safety of the virtual disk in use is improved, completeness verification is achieved, and security strength is greatly improved.

Description

technical field [0001] The invention relates to a technology in the field of information security, in particular to a virtual disk integrity protection system and method based on a trusted cryptographic module. Background technique [0002] With the development of information technology and network, more and more attention has been paid to the issue of data security, especially the classified information systems of governments and enterprises carry a large number of state secrets and commercial secrets, and data encryption technology is generally used for important data protection. The virtual disk technology establishes a container file in the file system to virtualize a disk that can be recognized by the operating system. The reading and writing of the disk is no different from the operation of the hard disk, and the user data ciphertext is stored in the container file through encryption technology. The virtual disk method is convenient and quick to protect data, and has b...

AI Technical Summary

Problems solved by technology

In the field of trusted computing, there have been many methods to solve the problem of component integrity measurement and verification before the operating system is loaded. However, when the operating system is running, user files are diverse, and the loading of user files is scattered, unlike BIOS startup and The POST process has strict linearity, so the integrity verification of user files when the operating system is running has always been a difficult problem

Images