基于QEMU的虚拟可信平台模块的设计与实现  

Design and implementation of QEMU-based virtual trusted platform module

作　　者：刘绍方[1] 余综[1] 牛峰[1] 

机构地区：[1]华北计算技术研究所,北京100083

出　　处：《计算机工程与设计》2011年第3期822-826,共5页Computer Engineering and Design

摘　　要：针对可信计算机系统信任链传递过程中的安全性缺陷,提出了在虚拟机中进行信任链传递的虚拟机穿越技术,并在QEMU虚拟机中实现了虚拟可信平台模块。虚拟可信平台模块通过采用信息代理的实现方式并利用虚拟机的封闭性和隔离性为可信计算机系统信任链传递提供了一个安全、高效和透明环境。通过KnoppixLinux分析和比较了QEMU虚拟机中实现的虚拟可信平台模块和Xen中基于可信平台模拟器的虚拟可信平台模块。Aimed at the security deficiency of transitive trusted chain in trusted computing system,the technology of transferring trusted chain across over the virtual machine is presented,besides virtual trusted platform module in QEMU virtual machine is developed.Im-plemented as an information agent,the virtual trusted platform module provided a secure,efficient and transparent context for transitive trusted chain by taking advantage of the seal property and isolation property of virtual machine.The implementation of virtual platform module in QEMU and that in Xen is analyzed,and comparison is made between them through Knoppix Linux.

关 键 词：可信计算 QEMU 信任链传递 虚拟可信平台模块 虚拟机 XEN 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]