Study on Trusted Vitual Machine Platform Based on Cipher Card

Abstract

Virtualization technology makes the sharing of hardware resources in the cloud into reality and also brings new challenge to the host security. From the perspective of dependability requirement of the post security in virtualization environment, this paper proposes the idea that the traditional TPM method is replaced by USB cipher card of higher crypto-operation performance and richer resources aimed at deficiency of the traditionally-designed TPM in virtualization environment. The design realizes a complete trusted virtual machine platform on which the process from real machine to virtual machine and from measurement start to remote attestation can be achieved in virtue of cipher card technology, and the security isolation mechanism of virtual machined data can be fulfilled with operation function of the symmetric cryptography based on cipher card.