Trustworthy measurement system and method for cloud host

Abstract

The present invention provides a trusted measurement system and method for a cloud host. A virtual trusted platform module is configured in a virtual environment, the trusted platform module is used to measure the physical environment, and the virtual environment is trusted by the virtual trusted platform module. Trust measurement, constructing a complete trusted chain from physical machine to virtual machine, which can realize the trusted integrity verification of the physical environment and virtual environment of the cloud host; the built trusted chain does not depend on the trusted physical machine The platform module, therefore, when the virtual machine migrates, first divide the space for saving the metric value of the virtual machine in the virtual PCR register of the destination host computer, and then copy each metric value of the physical machine of the destination host computer to the virtual PCR The corresponding bit of the register, when the virtual machine starts, measure the virtual machine again, and save the measured value in the corresponding bit of the virtual PCR register, that is, the trusted chain reconstruction of the virtual machine after migration is completed, and the portability is excellent. It is suitable for being widely used in cloud computing platforms.

Description

technical field [0001] The invention relates to a trusted measurement system and method of a cloud host, belonging to the technical field of information security. Background technique [0002] At present, the cloud computing platform has become the main basic computing platform, and the cloud host includes the physical environment built by physical machines and the virtual environment built by virtual machines. In order to ensure the credibility of the cloud computing platform, it is necessary to ensure the credibility of both the physical environment and the virtual environment. In this way, the integrity measurement of the cloud computing platform includes both the credibility measurement of the physical environment and the credibility measurement of the virtual environment. . The Chinese invention patent application with the application number 201510513472.1 discloses a method for constructing a virtualized trusted server trust chain, which uses the trusted platform modu...

AI Technical Summary

Problems solved by technology

[0003] The above-mentioned disclosed technical solution completely relies on the trusted platform module to measure the integrity of the physical machine and virtual machine of the cloud host. When the virtual machine needs to be migrated and other operations, the integrity of the trust chain will be destroyed, and the integrity of the virtual machine cannot be guaranteed. Trustworthy, not portable, not widely applicable in cloud computing platforms

Images