Trusted computing environment management system and method based on Openstack platform

By introducing a trusted computing environment management system with remote proof, encrypted communication, data encryption and key management on the Openstack platform, the problem of virtual machines being easily attacked during multi-party data interaction in the existing technology has been solved, and the security of virtual machines has been significantly improved.

CN119670100AActive Publication Date: 2025-03-21CHINA UNITED NETWORK COMM GRP CO LTD +2
5 Cites 0 Cited by

Patent Information

Application Number
CN202411814908.6
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-10
Publication Date
2025-03-21
Estimated Expiration
2044-12-10

AI Technical Summary

Technical Problem

Existing trusted computing technologies are easily attacked during multi-party data interaction, resulting in reduced security of trusted computing by virtual machines.

Method used

It adopts a trusted computing environment management system based on the Openstack platform, including a remote proof unit, a communication security unit, a data security unit and a key management unit. Verify the trustworthiness of the virtual machine through the remote proof unit, establish encrypted communications, create encrypted disks, and manage and back up keys to improve the security of the virtual machine.

Benefits of technology

Through remote proofing, encrypted communication, data encryption and key management, the security of virtual machines in trusted computing environments is significantly improved to prevent attacks and data breaches.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The embodiment of the invention provides a trusted computing environment management system and method based on an OpenStack platform, and relates to the field of cloud computing, and the trusted computing environment management system based on the OpenStack platform comprises remote attestation, communication security, data security and key management. Whether the virtual machine is credible or not is locally verified through the vtpm, remote certification is achieved, and the safety of the virtual machine operation environment is improved. Through establishing bidirectional identity authentication between a server and a client, communication channels of the server and the client are encrypted according to a shared key to realize communication security of a data plane. And the security mode of protecting the encryption key through tpm hardware is adopted, so that the security of disk data encryption is improved. And by introducing key management and key backup, the security of the key is improved. According to the system and the method, the virtual machine runs in a reliable environment, and the security of trusted computing is improved.
Need to check novelty before this filing date? Find Prior Art