面向云端系统的可伸缩群体远程对外证明方法  

Scalable collective remote attestation towards cloud system

作　　者：宋荷庆[1] 尤力强 宋元 王章野 SONG He-qing;YOU Li-qiang;SONG Yuan;WANG Zhang-ye(Hangzhou College of Commerce,Zhejiang Gongshang University,Hangzhou 311500,China;School of Information,Renmin University,Beijing 100872,China;College of Computer Science and Technology,Zhejiang University,Hangzhou 310013,China)

机构地区：[1]浙江工商大学杭州商学院,杭州311500 [2]中国人民大学信息学院,北京100872 [3]浙江大学计算机科学与技术学院,杭州310013

出　　处：《吉林大学学报（工学版）》2021年第6期2198-2206,共9页Journal of Jilin University:Engineering and Technology Edition

基　　金：国家自然科学基金项目(61472429)。

摘　　要：为真实地掌握大规模云端系统的完整性状态,同时保障可伸缩性和高效性的需求,本文提出了一种面向云端系统的群体对外证明方法,提出用对外证明关系树结构确定云端节点间的协作关系,协同收集、验证云端系统各节点的完整性状态。采用基于身份的聚合签名技术,快速检验证明结果的有效性。实验结果表明,本文方法与现有的云端系统对外证明方法相比,在可伸缩性方面具有较好的表现,能在19.9 s内有效证明3万个节点组成的云端系统的完整性状态。Aiming to attest the real integrity state of cloud system and improve scalability and efficiency of existing schemes, a Scalable Collective Remote Attestation(SCRA) scheme towards cloud system is presented in this paper. First, this paper proposes an attestation relationship tree structure to determine the cooperative relationship among cloud nodes, so that each node could implement collective attestation to promote efficiency and scalability. Second, to improve the accuracy, this paper introduces the identitybased aggregation signature technology to quickly review the validity of attestation report. Finally, we conduct security analysis and SCRA is simulated at large scale to assess scalability. Compared to current cloud system attestation methods, experimental results show that SCRA is not only able to effectively prove large-scale cloud system, but could also perform well in terms of scalability.

关 键 词：对外证明 云端系统 对外证明关系树 可伸缩性 聚合签名 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]