Method and system for protecting integrity of host based on self-checking mechanism

Abstract

The invention provides a method and a system for protecting the integrity of a host based on a self-checking mechanism. Based on an integrity measurement technology in trusted computing, the measurement reference value of the protected object is stored into an NV space in a TPM chip of a host; hardware and software of a host in the starting process of the host are measured in real time through trusted guidance, the real-time measurement value of a protected object is obtained, the integrity state of the host is judged by comparing a measurement reference value with the real-time measurement value, an incomplete object list is found based on an integrity report, and safe visual management is provided. According to the self-checking mechanism, the integrity of the host can be protected basedon an integrity measurement technology in a trusted computing system without a remote challenge party and a privacy PCA, the security of the host is improved, and the security of hardware and software of the host can be conveniently protected.

Description

technical field [0001] The invention relates to the technical field of server security, in particular to a method and system for protecting the integrity of a host based on a self-verification mechanism. Background technique [0002] Based on trusted computing technology, the Trusted Computing Group uses remote attestation to protect the security of hosts. Remote attestation schemes usually contain a remote challenger, private PCA, and challenged nodes. As the host of the challenged node, its security is usually judged by the remote challenger. [0003] Because it involves remote communication, in order to avoid identity masquerading and forgery between networks, the scheme must introduce privacy PCA to issue identity certificates, and use TPM (Trusted Platform Module, Trusted Platform Module) identity certificates to represent identities. When this remote attestation scheme protects the security of the host, PCA and the remote challenger must be introduced. When deployed ...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide a method and system for protecting the integrity of the host based on a self-verification mechanism, aiming at solving the problem of relying on the remote challenger and privacy PCA when using the remote certification scheme in the prior art, and realizing that the remote challenger is not required and privacy PCA, the integrity of the host can be protected based on the integrity measurement technology in the trusted computing system, and the security of the host can be improved.

Images