IaaS环境可信证明方法研究

Research on Trusted Attestation Method in IaaS Environment

提出一种基于时间戳的基础设施即服务(IaaS)动态可信证明方法。通过对云节点进行实时的动态度量,并将度量结果与度量时间绑定,验证云节点的当前运行状态可信。基于该方法,结合IaaS的服务业务流程,设计云节点注册证明、虚拟机启动证明及虚拟机关闭证明等远程证明方法,证明用户虚拟机运行于状态可信的云节点上,同时保证虚拟机数据的完整性和机密性。

A timestamp-based dynamic remote attestation method oriented to Infrastructure as Services（IaaS） is proposed.This method measures the dynamic cloud nodes＇ state in real time,binds the time of measurement with the result,and verifies the current trusted running state of cloud nodes.Based on the method,the attestation methods of cloud node register,remote virtual machine boot and shutdown in IaaS computing environment are designed.These IaaS attestation methods can be used to prove that the user＇s virtual machine is booted on a cloud node with trusted running state,and protect the integrity and confidentiality of virtual machine data.