云环境下可信服务器平台关键技术研究.pdf

云环境下可信服务器平台关键技术研究 刘 刚 吴 保 锡 张 尧 (浪 潮 电 子 信 息 产 业 股 份 有 限 公 司 安 全 技 术 部 北 京 100085) (liugang® inspur , com ) Research on Key Techniques of Trusted Server Platform in Cloud Environment Liu Gang, Wu Baoxi, and Zhang Yao C Ins pur Electronic Information Industry Co, 9 L td , Security Technology Department 9 B eijing 100085) Abstract Nowadays the cloud environment still confronted w ith a severe challenge on issues of security threats, and trusted platform control module (TPC M ) technology provides an effective countermeasure for building a server platform that is secure, proactive， and controllable. To resolve the two completeness issues in TPCM-based server realizations, in this paper we propose a server platform architecture, which is based on TPCM and trusted software base ( TSB ). Concerning server hardware, we present a power-on timing control scheme that takes out-of-band management module (OMM) into consideration, and a dedicated scheme for establishing the trust chain. Meanwhile, we illustrate some basic requirements and insights in the realization of virtual root of tru st, and we present a solution for virtual root of trust for measurement (V R T M ). We also give some discussion on other key techniques including trusted migrations. We believe this work can serve as a practical reference in the design of TPCM-based cloud server platforms. Key words cloud computing ；trusted server ；trusted platform control module (TPC M )； trusted software base (TSB) ；virtual root of trusted 摘 要 云 环 境 中 的 安 全 威 胁 依 旧 严 峻 ，可信平台控制模块 （ trusted platform control module ， TPCM )技术为建立安全、主动可控的服务器平台提供了有效途径.为了解决基于 T P C M 的可信服 务器实现中存在的两大完备性问题，构 建 了 基 于 T P C M 与可信软件基 （ trusted software base ， T S B ) 的服务器平台体系结构 . 在 服 务 器 硬 件 层 面 ，提 出 了 结 合 带 外 管 理 系 统 （o