基于可信计算的多租户隐私数据保护

针对多租户应用的隐私数据保护问题, 在分析多租户应用的特点和隐私数据保护需求的基础上, 将可信计算技术引入多租户隐私数据保护, 基于虚拟可信平台模块vTPM提出了一种具有定制性的加密保护方案, 利用vTPM提供的加密密钥对租户的隐私数据进行加密, 同时利用vTPM的密钥保护和管理功能对加密密钥进行保护. 最后, 基于Xen实现的vTPM实现了本方案.

Privacy Data Preservation of Multi-tenancy Based on Trusted Computing

To address the problem of privacy data preservation of multi-tenancy applications, on the basis of analyzing characteristics of multi-tenancy applications and the corresponding demands of privacy data preservation. The trusted computing technique was introduced into privacy data preservation of multi-tenancy, presented an encryption and preservation approach with customizability based on virtual trusted platform module(vTPM). Privacy data of multi-tenant was encrypted by making use of encryption key provided by vTPM, and the encryption key was protected by using encryption key preservation and management of vTPM. Finally, the approach was implemented based on the Xen implementation vTPM.