基于哈希树的度量证据可信存储方案设计

THE DESIGN OF CREDIBLE STORAGE SCHEME ON MEASUREMENT EVIDENCE BASED ON HASH TREE

计算平台的可信性由远程证明过程中提供的度量证据进行验证,验证程序根据计算平台在启动过程创建的度量证据建立信任。度量值扩展操作创建的度量证据和相关度量记录是线性的,查找效率较低。提出一种基于平衡二叉哈希树的构建度量证据的方法。计算平台上组件的度量值作为树叶,所有组件的度量值集合的度量值作为树根。在验证计算平台的过程中,使用哈希树的度量记录和根寄存器,在度量证据与标准值比较时显著提高错误组件查找的速度,从而提高效率。实验结果表明,平衡二叉哈希树模型在不增加空间复杂度的同时,查询时间开销显著减少。

The credibility of computing platform is verified by the measurement evidence provided in the process of remote attestation procedure,and the verification procedures build trust according to the measurement evidence which is created in the startup process of the computing platform. However,the measurement evidence and the associated measurement record which are created by extended operation of measurement are linear,with a low researching efficiency. Thus,a method of creating measurement evidence is proposed based on balanced binary hash tree. On the computing platform,the component measurement values are represented as leaves,and the set of measurement value of all components are represented as the roots of a hash tree. In the process of verifying computing platform,the hash tree measurement records and the root registers are used to increase the searching speed of fault component when the measurement evidence is compared with the standard value. The experimental results show that the proposed model reduces time cost without increasing space complexity.