Research On Cloud Platform Remote Attestation Method With Attributes-based Encryption

Cloud service is supported by the cloud computing platform and provided for users with on-demand character through the network.The frequency of cloud security incidents in recent years has been causing trust issues between cloud service provider and cloud user.The remote attestation aiming at proving platform trustworthiness is the important security mechanism in trusted computing technology.The traditional remote attestation schemes,for cloud platform,cannot ensure privacy of the configuration information,and run with coarse granularity and poor flexibility,and cannot express differentiated security expection of cloud users.This paper has proposed the remote attestation based on KP-ABE algorithm,the remote attestation based on CP-ABE algorithm and the remote attestation based attributebased signature algorithm,by importing attributes-based encryption mechanism.For the security problems caused by virtual machine migration in cloud environment,this paper has proposed virtual machine trust migration scheme,which permits the user to define migration policy and to verify trustworthiness of cloud service to guarantee that virtual machine runtime environment meet security policy,by using remote attestation scheme based on CP-ABE algorithm.With the extension of cloud service business,different cloud users also put forward different security requirements for cloud computing environment.Just as cloud users have different performance requirements for cloud computing environments,they also have different security requirements.This paper presents a user-defined trusted cloud service model,which allows cloud service providers to provide security services based on the actual needs of cloud users,and supports user attestation Whether the security state of virtual machine meets the security policy by using the remote attestation based on attribute-based signature.Finally,the proposed model is validated based on the Xen virtual trusted platform,which proves the usability and rationality of the remote proof scheme.