Method and system for verifying virtual trusted root in cloud environment

Abstract

The embodiment of the invention discloses a method and a system for verifying a virtual trusted root in a cloud environment, and the method comprises the steps: verifying the identity of the virtual trusted root through a cloud management platform when a virtual machine loads and operates the trusted root each time; and the virtual machine selects whether to continue to load and run the virtual trusted root according to the verification result of the cloud management platform. According to the method of the invention, the virtual trusted root verification function can be integrated in the cloud management platform, so that the private data is prevented from being damaged due to the use of the virtual trusted root by subsequent programs.

Description

technical field [0001] The invention relates to cloud computing technology, in particular to a method and system for verifying a virtual root of trust in a cloud environment. Background technique [0002] Information security has become a key factor restricting the application and development of cloud computing. Among them, the security of cloud data center infrastructure, the integrity of data and information of cloud data center virtual machine tenants, and the trust between cloud service providers and cloud service tenants are important factors. To improve the key foundation of cloud security, the solution to these problems needs to start from the underlying hardware of the computer and start from the architecture. Trusted computing, as a security technology that starts from the hardware platform and architecture to solve the information security of computing platforms, has become a key technical means to improve the security of cloud data center infrastructure and the tr...

AI Technical Summary

Problems solved by technology

The virtual root of trust stores sensitive information such as the key of the virtual machine user. Once the virtual root of trust is replaced by a malicious attacker, when the virtual machine user encrypts and decrypts private data using the replaced virtual root of trust, the private data may be compromised. destroyed

[0004] At present, the virtual root of trust verification function has not been integrated in the cloud management platform. Virtual machines only use the virtual root of trust. The cloud management platform cannot know whether the virtual root of trust is issued by a known issuer. Once the virtual root of trust is Replacement, the virtual root of trust will run normally, but the cloud management platform cannot know in time, and user data is in danger of being destroyed

Images