Trusted root management method and device, equipment and storage medium

Abstract

The invention discloses a trusted root management method and device, equipment and a storage medium. The method is applied to a trusted root control device arranged in a unified extensible firmware interface (UEFI), the trusted root control device supports unified mapping management of a physical trusted root and a virtual trusted root, and the method comprises the following steps: based on an application request sent by a trusted root applicant, sending a trusted root application request to the trusted root applicant; sending the encrypted trusted root identifier to the trusted root applicant; the physical trusted root and the virtual trusted root are respectively in one-to-one correspondence with the trusted root identifiers so as to perform unified mapping management. In the embodiment of the invention, the physical trusted root and the virtual trusted root are managed by using the encrypted trusted root identifier, so that the use security of the trusted root is improved, and the use convenience of the trusted root is also improved.

Description

technical field [0001] The present invention relates to the field of information security, in particular to a root of trust management method, device, equipment and storage medium. Background technique [0002] Trusted Computing (Trusted Computing, TC) technology is one of the core technologies of information security. Using trusted computing to establish trust from server hardware to software and virtual systems for the cloud computing environment is one of the solutions to the security problems of the cloud computing environment. an effective way. However, a single physical root of trust bound to the main board of the server, such as TPM (Trusted Platform Module, Trusted Platform Module) or TPCM (Trusted Platform Control Module, Trusted Platform Control Module), has limited computing power and usually requires Create a virtual root of trust for each virtual machine based on the root, such as building a virtual root of trust server, and the virtual root of trust server wil...

AI Technical Summary

Problems solved by technology

However, a single physical root of trust bound to the main board of the server, such as TPM (Trusted Platform Module, Trusted Platform Module) or TPCM (Trusted Platform Control Module, Trusted Platform Control Module), has limited computing power and usually requires Create a virtual root of trust for each virtual machine based on the root, such as building a virtual root of trust server, and the virtual root of trust server will perform CS (Client-Server, client-server) centralized management of the virtual root of trust , when the business server wants to create a new virtual machine, it can send a request to the virtual root of trust server through the virtual root of trust client, so as to apply for a virtual root of trust for the virtual machine. The complexity of use is high, and it is difficult to support many single-server application scenarios

Images