| 基于信任扩展的可信虚拟执行环境构建方法研究 |
| |
| 引用本文： | 王丽娜,高汉军,余荣威,任正伟,董永峰.基于信任扩展的可信虚拟执行环境构建方法研究[J].通信学报,2011(9):1-8. |
| |
| 作者姓名： | 王丽娜 高汉军 余荣威 任正伟 董永峰 |
| |
| 作者单位： | 软件工程国家重点实验室;武汉大学计算机学院; |
| |
| 基金项目： | 国家自然科学基金资助项目(60970114,61103219); 国家高技术研究发展计划(“863”计划)基金资助项目(2009AA01Z442); 中央高校基本科研业务费专项基金资助项目~~ |
| |
| 摘 要： | 为保护虚拟机运行环境及上层服务软件的完整性、安全性,提出了一种基于信任扩展的可信虚拟执行环境的构建方法.首先,建立物理平台配置寄存器(PCR,platform configuration register)与虚拟PCR的映射关系,以此实现虚拟可信平台模块(vTPM)与底层可信计算基的绑定；其次,利用本地vTPM管理器签...
|
| 关 键 词： | 信任扩展 可信虚拟执行环境 可信平台模块 密封存储 远程证明 |
Research of constructing trusted virtual execution environment based on trust extension |
| |
| WANG Li-na,GAO Han-jun,YU Rong-wei,REN Zheng-wei,DONG Yong-feng.Research of constructing trusted virtual execution environment based on trust extension[J].Journal on Communications,2011(9):1-8. |
| |
| Authors: | WANG Li-na GAO Han-jun YU Rong-wei REN Zheng-wei DONG Yong-feng |
| |
| Affiliation: | WANG Li-na1,2,GAO Han-jun1,YU Rong-wei1,REN Zheng-wei1,DONG Yong-feng1(1.State Key Laboratory of Software Engineering,Wuhan 430072,China,2.School of Computer Science,Wuhan University,China) |
| |
| Abstract: | A method to build trusted virtual execution environment based on trust extension was proposed to ensure the integrity and security of virtual machine and service software.Firstly,to establish mapping of virtual PCR(vPCR) to hardware TPM's PCR,it would be realized to link the vTPM to its TCB.Secondly,using vTPM to issue certificate,trusted certificate chain could be extended.Because of trust extension from hardware to virtual platform,TPM functions(such as remote attestation,sealed storage,etc) were availabl... |
| |
| Keywords: | trust extension trusted virtual execution environment trusted platform module sealed storage remote attestation |
| 本文献已被 CNKI 等数据库收录！ |
| 点击此处可从《通信学报》浏览原始摘要信息 |
|
点击此处可从《通信学报》下载全文 |
|
