基于双层非平衡散列树的云平台远程验证方案

doi:10.11959/j.issn.1000-436x.2017180

Abstract

Abstract:

In order to validate the service of cloud,an improved remote attestation scheme based on unbalanced hash tree of cloud platform was proposed.Double-layer unbalanced hash tree was built by introducing layer,original single tree was expanded to main tree and sub tree,which corresponded to virtual machine in cloud platform and the running components in virtual machine.Attestation needs no more than measurement component and authentication path.The analysis shows that this scheme can increase the attestation efficiency of cloud platform,and is good at protecting privacy and expandability,which is suitable for validating cloud platform service.

Key words: remote attestation, cloud computing, unbalanced hash tree, virtual machine

CLC Number:

TP309

Xing RONG,Chang-xiang SHEN,Rong JIANG,Yong ZHAO. Remote attestation scheme for cloud platform based on double-layer unbalanced hash tree[J]. Journal on Communications, 2017, 38(9): 31-38.

Figures/Tables 8

References 9

[1]	SANTOS N , GUMMADI K P , RODRIGUES R . Towards trusted cloud computing[C]// Conference on Hot Topics in Cloud Computing. 2009: 1-5.
[2]	刘川意, 方滨兴 . T-YUN:云提供商可信性审计与验证[J]. 信息网络安全, 2012,8: 97-100.
	LIU C Y , FANG B X . T-YUN:trustworthiness audit and verification of the cloud[J]. Netinfo Security, 2012,8: 97-100.
[3]	张焕国, 罗捷, 金刚 ,等. 可信计算研究进展[J]. 武汉大学学报（理学版）, 2006,52(5): 513-518.
	ZHANG H G , LUO J , JIN G ,et al. Research progress of trusted computing environment[J]. Journal of Wuhan University:Natural Science Edition, 2006,52(5): 513-518.
[4]	SAILER R , ZHANG X , JAEGER T ,et al. Design and implementation of a TCG-based integrity measurement architecture[C]// USENIX Security Symposium. 2004: 223-238.
[5]	徐梓耀, 贺也平, 邓灵莉 . 一种保护隐私的高效远程验证机制[J]. 软件学报, 2011,22(2): 339-352.
	XU Z Y , HE Y P , DENG L L . Efficient remote attestation mechanism with privacy protection[J]. Journal of Software, 2011,22(2): 339-352.
[6]	翁晓康, 张平, 王炜 ,等. 基于非平衡散列树的平台完整性远程验证机制[J]. 计算机应用, 2014,34(02): 433-437.
	WENG X K , ZHANG P , WANG W ,et al. Remote attestation mechanism for platform integrity based on unbalanced-hash tree[J]. Journal of Computer Applications, 2014,34(2): 433-437.
[7]	YAN J , ZHAO Y . Trusted attestation of behavior measurement based on Merkle hash tree[J]. Journal of Computational Information Systems, 2013,9(9): 3443-3451.
[8]	朱毅, 李清宝, 钟春丽 ,等. 用于细粒度完整性度量的非平衡二叉散列树模型[J]. 小型微型计算机系统, 2014,35(7): 1604-1609.
	ZHU Y , LI Q B , ZHONG C L ,et al. Non-balanced binary hash-tree model for fine-grained integrity measurement[J]. Journal of Chinese Computer Systems, 2014,35(7): 1604-1609.
[9]	ENGLAND P , . Practical techniques for operating system attestation[C]// Trusted Computing Challenges and Applications,First International Conference on Trusted Computing and Trust in Information Technologies,Trust 2008. 2008: 1-13.

Metrics

Recommended 0

No Suggested Reading articles found!

[1]	Ling MA, Qiliang FAN, Ting XU, Guanchen GUO, Shenglin ZHANG, Yongqian SUN, Yuzhi ZHANG. Scheduling framework based on reinforcement learning in online-offline colocated cloud environment [J]. Journal on Communications, 2023, 44(6): 90-102.
[2]	Huaqun WANG, Zhe LIU, Debiao HE, Jiguo LI. Identity-based provable data possession scheme for multi-source IoT terminal data in public cloud [J]. Journal on Communications, 2021, 42(7): 52-60.
[3]	Yubo SONG, Qi CHEN, Rui SONG, Aiqun HU. Android application privacy protection mechanism based on virtual machine bytecode injection [J]. Journal on Communications, 2021, 42(6): 171-181.
[4]	Jianhong ZHANG, Menglong WU, Jing WANG, Pei LIU, Zhengtao JIANG, Changgen PENG. Secure and verifiable multi-keyword searchable encryption scheme in cloud [J]. Journal on Communications, 2021, 42(4): 139-149.
[5]	Ruiqi LI, Chunfu JIA, Yafei WANG. Multi-key homomorphic proxy re-encryption scheme based on NTRU and its application [J]. Journal on Communications, 2021, 42(3): 11-22.
[6]	Bibo TU, Jie CHENG, Haojun XIA, Kun ZHANG, Ruina SUN. Overview of research on trusted attestation technology of cloud virtualization platform [J]. Journal on Communications, 2021, 42(12): 212-225.
[7]	Jiawei ZHANG, Jianfeng MA, Zhuo MA, Teng LI. Time-based and privacy protection revocable and traceable data sharing scheme in cloud computing [J]. Journal on Communications, 2021, 42(10): 81-94.
[8]	Wenjuan WANG, Xuehui DU, Dibin SHAN. Construction method of attack scenario in cloud environment based on dynamic probabilistic attack graph [J]. Journal on Communications, 2021, 42(1): 1-17.
[9]	Youliang TIAN,Qin LUO. Verifiable multi-keyword search scheme based on improved Merkle-Tree authentication method [J]. Journal on Communications, 2020, 41(9): 118-129.
[10]	Na WANG,Kun ZHENG,Junsong FU,Jian LI. Method of ciphertext retrieval in mobile edge computing based on block segmentation [J]. Journal on Communications, 2020, 41(7): 95-102.
[11]	Lindong ZHAO,Wenqin ZHUANG,Jianxin CHEN,Liang ZHOU. Hierarchical task offloading in heterogeneous cellular network:modeling and optimization [J]. Journal on Communications, 2020, 41(4): 34-44.
[12]	Bing LIANG,Wen JI. Multiuser computation offloading for edge-cloud collaboration using submodular optimization [J]. Journal on Communications, 2020, 41(10): 25-36.
[13]	SU Mingfeng,WANG Guojun,LI Renfa. Multidimensional QoS cloud computing resource scheduling method based on stakeholder perspective [J]. Journal on Communications, 2019, 40(6): 102-115.
[14]	CHEN Xingshu,HUA Qiang,WANG Yitong,GE Long,ZHU Yi. Research on low-rate DDoS attack of SDN network in cloud environment [J]. Journal on Communications, 2019, 40(6): 210-222.
[15]	Wanliang WANG, Zelin ZANG, Guoqi CHEN, Hangyao TU, Yule WANG, Linyan LU. Research on optimal two element exchange algorithm for large scale cloud computing server scheduling problem [J]. Journal on Communications, 2019, 40(5): 180-191.

Remote attestation scheme for cloud platform based on double-layer unbalanced hash tree

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 8

References 9

Related Articles 15

Metrics

Recommended 0