A cloud platform audit log protection method based on sgx

Abstract

The invention discloses an SGX-based cloud platform audit log protection method, which ensures that the cloud platform audit log used by a third party is authentic and effective on the basis of assuming that the original audit log generated by the cloud node is authentic. Before the audit log is transmitted from the cloud node, both the cloud node and the third party participating in the audit log transmission are authenticated and the state credibility certificate based on remote proof is carried out, so as to ensure that the identity and status of the audit log transmission node are reliable. Faithful. The invention realizes identity verification and state certification between all cloud nodes that generate logs and third parties that process logs, thereby ensuring that the identities of all nodes participating in cloud audit log processing cannot be impersonated, and the computing environment involved in log processing is credible. Based on the enclave, the invention realizes the safe isolation and execution of the key codes of the audit log processing program, and can prevent the attacks of privileged software such as operating system, VMM and BIOS.

Description

technical field [0001] The invention relates to a method for protecting a cloud platform audit log, in particular to a method for secure transmission and storage of a cloud platform audit log based on a trusted third party, and belongs to the field of cloud computing. Background technique [0002] With the continuous expansion of the network scale, people tend to use the network as a way of daily business processing. It is against this background that cloud computing technology emerges. Cloud computing technology has been widely used due to its versatility and low cost of use. More and more enterprises and individual users choose to deploy their business systems on the cloud platform. Cloud users can access cloud computing centers through cloud nodes to obtain different levels of services. However, the cloud computing platform is a large-scale distributed computing system with the characteristics of openness, and the security problems of the cloud platform are gradually ex...

AI Technical Summary

Problems solved by technology

However, audit logs may be stolen and tampered with when they are transmitted between the cloud platform and third parties and stored in third parties, resulting in the loss of credibility of audit logs

In a complex cloud network topology, if the traditional encrypted transmission mechanism of two-two negotiation keys between the communication parties is still used to protect the transmission process of the audit log, multiple negotiation keys will be generated, resulting in key management and multiple times. The problem of encryption and decryption

At the same time, it is difficult to guarantee the security of the audit log processing program itself in the cloud platform and in the third party

Images