可信云平台服务技术研究

越来越多的应用以云中网络服务的形式在服务提供商的控制下发布出来，但使用这些服务的用户却没有办法判断这些服务是否是可信的。文中通过一个可信管理框架来支持在云计算环境中可信服务的建立，让用户通过一个中立第三方得以获知服务程序的可信度，实现一个可信平台服务。最后在一个支持Python／Django框架的云平台上实现了一个原型系统，让服务提供商得以在封装服务程序实例的同时再向其外部用户证明Python代码的可信度。一旦运行，服务实例可以拥有独立标识并能防止用户篡改其代码。

Study on Trustworthy Cloud Services

More applications are increasingly packaged as network services running in the cloud under the control of the service provider. However,the users of these services,beyond the assurances of the service provider,couldn’t surely determine if these services are trustworthy. The problem of how to build a support for trustworthy services in the cloud is now addressed within the context of a larger trust management framework. This paper treats of how users could gain insights and trusts in service applications by a neutral third party,thus realizing a trusted platform-as-a-service. Finally a prototype system is implemented on the cloud platform in support of a Python/Django web framework. The cloud provider seals instances of service applications and attests the trustiness of its Python source code to its external users. Once launched and attested,the service instances could run with an independent identity and are immune to being tampered by the cloud customer.