基于双层非平衡散列树的云平台远程验证方案  

Remote attestation scheme for cloud platform based on double-layer unbalanced hash tree

作　　者：荣星[1,2] 沈昌祥[2] 江荣[3] 赵勇 RONG Xing;SHEN Chang-xiang;JIANG Rong;ZHAO Yong(The 3rd Academy, PLA Information Engineering University, Zhengzhou 450004, China;College of Computer Science, Beijing University of Technology, Beijing 100124, China;The 6th Academy, National University of Defense Technology, Changsha 410073, China)

机构地区：[1]解放军信息工程大学三院,河南郑州450004 [2]北京工业大学计算机学院,北京100124 [3]国防科技大学六院,湖南长沙410073

出　　处：《通信学报》2017年第9期31-38,共8页Journal on Communications

基　　金：国家高技术研究发展计划("863"计划)基金资助项目(No.2015AA016002);国家重点研发计划基金资助项目(No.2016YFB0800804;No.2016YFB0800303)~~

摘　　要：为验证云服务的可信性,提出一种改进的基于非平衡散列树的云平台远程验证方案。通过引入层级构建双层非平衡散列树,将原先的单一树扩展为主树和子树,二者分别对应云服务平台中的虚拟机和虚拟机中的运行组件,证明时仅需要提供待度量组件和认证路径。分析表明,该方案进一步提高了云平台的证明效率,并且具有较好的隐私保护能力和可伸缩性,能够很好地用于云服务的可信性证明。In order to validate the service of cloud,an improved remote attestation scheme based on unbalanced hash tree of cloud platform was proposed.Double-layer unbalanced hash tree was built by introducing layer,original single tree was expanded to main tree and sub tree,which corresponded to virtual machine in cloud platform and the running components in virtual machine.Attestation needs no more than measurement component and authentication path.The analysis shows that this scheme can increase the attestation efficiency of cloud platform,and is good at protecting privacy and expandability,which is suitable for validating cloud platform service.

关 键 词：远程证明 云计算 非平衡散列树 虚拟机 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]