A Trusted Measurement Scheme For Grid Service

With the development of grid computing, grid-user needs to identify whether grid service which registered in grid platform can execute correctly or not. However, grid platform does not provide the trusted measurement scheme for grid service currently and grid user can not verdict whether grid service can execute correctly or not through the grid platform.Focus on the aforementioned problem, researching on trusted measurement scheme which established in trusted grid Platform becomes such an important study. Trusted Measurement Scheme for Grid Service including Grid Service Reference Measurement and Grid Service Runtime Measurement, and two parts of the measurements provide proofs to grid service verifier. The basic thought for Grid Service Reference Measurement is: establishing reference database access control policy based on BLP model to control the read/written operation for reference datasheet, when user tries to access reference datasheet, using the policy to verify his/her purview to the datasheet, only legal user can read/write the reference datasheet; Verifying whether the grid service reference data inserted to reference datasheet by legal user is integrate or not though reference datasheet integrity attestation which includes datasheet measurement, storing measurement result, updating measurement result and verifying datasheet these four steps. The basic thought for Grid Service Runtime Measurement is: measuring the key files of container also grid service and establishing grid service measurement list by using composing algorithm, preserving grid service measurement list's every measurement value into PCR register which protected by TPM by using trusted storing algorithm, sending AIK certificate, grid service measurement list and AIK signed trusted storing value to grid service verifier, verifier can verdict whether grid service measurement list it receives is authentic and integrate.Grid Service Trusted Measurement System is established based on Trusted Measurement Scheme for Grid Service. Function and Performance tests are done based on this system. Function test indicates that this system contains the function like reference datasheet integrity attestation, establishing grid service measurement list, trusted storing and trusted reporting measurement list. Performance test indicates that the success establishing rate for grid service measurement list and the success verifying rate for reference datasheet are all above 90%; trusted storing mechanism has a strong expansibility; the executing efficiency for reference datasheet integrity attestation is high. Both the function and performance test show that the whole capability of Grid Service Trusted Measurement System is excellent.