Design And Implementation Of A Secure Framework For Server Platforms Based On Firmware Authentication Method

Server platform’s security show much more important with the development of cloud computing technology.Intel corporation’s TXT technology is a new g eneration solution aimed to solve the server platform’s secure problems and pro tect the virtual machine which run on the servers.This technology needs the ha rdwares’ s(special cpu series,TPM,special chips and so on) support,existing serv ers almost could not use the technology,and updated to newest platform needs a lot of money.A software solution which do not depend on special hardwares and is able to solve the server platform’s secure problems seems to be much more important.To solve above mentioned problems,this paper put forward an perfect soluti on for server platform’s security problems based on firmware remote authentica tion mechanism,which is fit to private﹑public cloud systems,and Paas﹑Saas﹑I aas cloud application modules,fill the gaps of platform’s security for servers wh ich do not support TXT.The solution completely depend on software which wo rked same like TXT,can replace TXT technology.For the feature that existed sta tic trust chain’s virtual trusted root based on software method is not safe,and t he ability that resist against attacks is weak,this paper puts forward a firmwar e remote authentication mechanism use WebService,to keep the whole trust chai n safe from source.For the reason that traditional platforms most use Linux an d cloud computing platforms grow rapidly,this paper gets a common used secur e framework worked with firmware authentication mechanism for server platfor ms by improve on the old framework.The core components of the framework r ely on firmware,but not kinds of OS, and get much more flexibility.The frame work can be deployed on Microsoft corporation and other company’s cloud co mputing platforms.In addition, adds the Launch Control Policy on traditional cl oud computing technology,brings the concept of secure rank,makes trust comp ute technology become practicality. At last,the paper implements the framework,use SOAP based on SOA architecture to design authentication server,and show the whole secure solution.