vTPM Root Key Reconstruction via KMC Primary Seed

Solution Overview

Problem

Existing virtual machine security protection methods, relying on AIKs created by TPMs in physical hosts, face complexity and resource consumption issues when virtual machines are migrated, breaking the key hierarchy and requiring re-establishment of key protection systems.

Innovation Solution

A vTPM-based method where a virtual machine requests a primary seed from a Key Management Center (KMC) using a UUID, allowing the KMC to generate and distribute a primary seed independently of the physical host, enabling the virtual machine to set up a new key protection system upon migration without relying on the original host.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a new key protection system is set up for the virtual machine on the new physical host during migration, then the virtual machine can continue to operate securely, but the process requires complex operations and high resource consumption

Engineering Contradiction:

Improvesecurity continuityVSAvoidmigration complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The primary seed is generated and stored in the KMC before virtual machine migration occurs. This preliminary action allows the virtual machine to quickly reconstruct its key protection system on the new host without performing complex key generation operations during migration, thereby reducing migration complexity while maintaining security continuity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The KMC acts as an intermediary between the virtual machine and the new physical host. Instead of the virtual machine directly interacting with the new host to establish security, it retrieves the pre-generated primary seed from the KMC, which then enables automatic key protection system setup on the new host, significantly simplifying the migration process.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If a new key protection system is set up for the virtual machine on the new physical host during migration, then the virtual machine can continue to operate securely, but the process consumes high resources

Engineering Contradiction:

Improvesecurity continuityVSAvoidresource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The primary seed is generated and stored in the KMC before virtual machine migration occurs. This preliminary action allows the virtual machine to quickly reconstruct its key protection system on the new host without performing complex key generation operations during migration, thereby reducing migration complexity while maintaining security continuity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

Instead of regenerating cryptographic keys on the new host, the system copies the pre-generated primary seed from the KMC to the new host. This copying approach consumes minimal resources compared to performing full key generation and protection system setup operations during migration.

Inventive Principle:

Principle #26Copying

3Ease of manufacture

If the vTPM uses a root key created by the TPM on the physical host, then the key protection system can be established, but the system becomes dependent on the specific physical host

Engineering Contradiction:

Improvekey protection setupVSAvoidhost independence

Core Design Contradiction:

Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The KMC acts as an intermediary that decouples the virtual machine from dependency on specific physical hosts. By storing the primary seed in the KMC rather than in the physical host's TPM, the system enables the virtual machine to retrieve its security credentials from any host that has access to the KMC, achieving host independence while maintaining ease of key protection setup.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The primary seed stored in the KMC serves multiple functions: it can be used to reconstruct the key protection system on any physical host, not just the original host. This universal approach allows the virtual machine to maintain its security credentials across different hosts, enhancing adaptability while keeping the setup process simple.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10922117B2VTPM-based virtual machine security protection method and system

Publication Date: 2021.02.16 HUAWEI CLOUD COMPUTING TECHNOLOGIES CO LTD

AI summary

The present application discloses a virtual trusted platform module (vTPM)-based virtual machine security protection method and system. The method, executed by a physical host, includes: receiving a primary seed acquisition request sent by a virtual machine, where the primary seed acquisition request carries a UUID; sending the UUID to a KMC, so that the KMC generates a primary seed according to the UUID; and receiving the primary seed fed back by the KMC, and sending the primary seed to the virtual machine, so that the virtual machine creates a root key of a vTPM according to the primary seed, where the root key is used by the vTPM to create a key for the virtual machine to protect security of the virtual machine. As such, the same root key can be created by using the primary seed.