Virtual trusted platform module function implementation method and management equipment

Abstract

The embodiment of the invention provides a virtual trusted platform module function implementation method and management equipment. The method is executed in an abnormal level EL3 of a processor with an ARM V8 framework adopted and comprises the steps that one or more vTPM instances corresponding to VMs are generated according to one or more VM needs, the generated one or more vTPM instances are stored in a preset safety space, each vTPM instance is provided with a dedicated instance communication queue which is used for the corresponding VM, and a physical address is distributed to each instance communication queue; through interaction with VMMs and the VMs, the VMs can acquire the communication queue virtual addresses of the VMs corresponding to the communication queue physical addresses of the vTPM instances in a VM virtual address space, and the VMs are in communication with the communication queues of the vTPM instances through the VM communication queue virtual addresses. Consequently, time delay is reduced, and processing efficiency is improved.

Description

technical field [0001] The embodiment of the present invention relates to the field of communication technology, and in particular to a method for implementing functions of a virtual trusted platform module and a management device. Background technique [0002] The Trusted Platform Module (Trusted Platform Module, TPM for short) technology is proposed by the Trusted Computing Group (Trusted Computing Group, TCG for short), with the purpose of preventing unauthorized users from changing sensitive data. Since the TPM is to ensure the reliability of the platform, an operating system platform corresponds to an independent TPM. In the prior art, IBM has proposed a vTMP solution, that is, a chip (for example, a security co-processor) independent of a central processing unit (Central Processing Unit, referred to as: CPU) is used to provide a security feature similar to that of a TPM. The software virtualizes multiple virtual Trusted Platform Modules (virtual Trusted Platform Modul...

AI Technical Summary

Problems solved by technology

[0003] However, in the prior art, every time a vTMP is accessed, it needs to be converted and processed by a secure cooperating processor, which increases the delay and reduces the processing efficiency; at the same time, a hardware processor needs to be installed when implementing the vTPM, resulting in an increase in hardware size

Images