开放环境下的远程证明体系架构设计

虚拟化技术和证明技术相互依赖,只有两者相互结合,才能为安全系统奠定坚实的基础。首先给出在开放环境下使用证明技术建立信任关系需要解决的问题,然后提出一种支持远程证明的安全体系架构Sec_TV,讨论该架构如何结合虚拟化和证明技术来增强系统的安全性,并给出Sec_TV下远程证明协议设计,最后,从Sec_TV体系架构本身及Sec_TV远程证明协议两个方面讨论这个远程证明体系架构的安全性。

DESIGNING REMOTE ATTESTATION ARCHITECTURE IN OPEN ENVIRONMENTS

The virtualisation and proven technologies are the interdependent techniques;only by combining these two can lay sound foundation for security system.First,in the paper we suggest the problems to be resolved during establishing trust relationship in open distributed environments with proven technology.Secondly,we present a secure architecture Sec_TV which supports the remote attestation,and discuss this architecture in terms of combining the virtualisation and proven technologies to enhance the security of the system,and then we provide the design of remote attestation protocol on Sec_TV.Finally,we discuss the security of the remote attestation architecture from two aspects of both Sec_TV architecture itself and Sec_TV remote attestation protocol.