基于硬件虚拟化TCM的信任链扩展方法

Trust Chain Extension Based on Hardware Virtualization TCM

本文团队曾提出基于硬件虚拟化技术构建虚拟化TCM的方法,并设计了硬件虚拟化TCM支撑的可信虚拟环境,但是并未对信任链的扩展提出详细的方案.基于此研究成果,提出了硬件虚拟化TCM支撑下的虚拟环境信任链扩展的方法,对信任链扩展的详细过程进行描述,构建了从p TCM到虚拟机的完整信任关系,并提出虚拟机与可信计算基绑定的方案.实验分析表明,本文方案能够在新型可信虚拟环境中实现信任链的扩展,有效增强计算环境安全,系统开销可接受.

Our team has proposed a method of building a virtualized TCMbased on hardware virtualization technology. We designed a trusted virtual environment supported by hardware virtualization TCM,but did not propose a detailed solution for expansion of the trust chain. Based on this research,we propose a method of extending the virtual environment trust chain,and then describe the detailed process,constructing a complete trust relationship from the p TCMto the virtual machine. A scheme of trusted computing base binding is also proposed. Experimental analysis shows that the proposed scheme can extend the trust chain in the newtype of trusted virtual environment,effectively enhance the security of computing environment,and the system overhead is acceptable.