Method for realizing delegation of cipher function of TCM (trusted cryptographic module) under cloud computing environment

Abstract

The invention relates to a method for realizing delegation of a cipher function of a TCM (trusted cryptographic module) under a cloud computing environment. The method comprises the following steps that a cipher function of the hardware TCM is sequentially delegated by a TCM cipher delegation manager arranged in a VMM (virtual machine monitor) and a TCM cipher delegation module arranged in a VM (virtual machine), the TCM and each level of agency need to generate corresponding encryption and decryption keys and signing keys, and the delegation of the cipher function of the TCM is realized by a manner of gradual key delegation and encryption protection. The method for realizing the delegation of the cipher function of the TCM (trusted cryptographic module) under the cloud computing environment, disclosed by the invention, has the advantages that each VM owns one light-weight TCM cipher delegation module and finishes the cipher function compared with a hardware TCM chip and a virtual TCM; and a plurality of TCM cipher delegation modules can quickly construct and concurrently and efficiently process data, so that the data processing efficiency of a whole platform is improved while the confidentiality, the completeness and the authentication of platform data are ensured, and the concurrent and efficient data process requirements under the cloud computing environment are better met.

Description

technical field [0001] The present invention relates to the technical field of computer information security, and mainly relates to a method for realizing authorized proxy of a trusted cryptographic module (Trusted Cryptographic Module, TCM) cryptographic function in a cloud computing environment. authenticity. Background technique [0002] With the development of information technology and people's increasing requirements for computer storage and computing power, cloud computing has become a hot spot in current computer technology. In the era of cloud computing, "cloud" will replace us to complete the work of storage and computing. Cloud computing refers to the supercomputing model based on the Internet, that is, a large amount of information, storage resources and processor resources scattered on personal computers, mobile phones and other devices are concentrated on the server side, and the "cloud" composed of server groups is managed in a unified manner. And provide d...

AI Technical Summary

Problems solved by technology

[0005] However, since TCM is a SOC chip, its data processing process is single-threaded. In the face of frequent data transmission and multi-user connections in the cloud computing environment, TCM is often unable to efficiently encrypt, decrypt and sign data in a multi-threaded manner. , which leads to TCM not being well suited for cloud computing environments

The use of virtual TCM alleviates to a certain extent the problem that a single physical TCM cannot efficiently support multiple virtual machines and multiple users in parallel. However, due to the complex functions and implementation of virtual TCM itself, the process of establishing and using it is cumbersome and time-consuming.

Images