CN113703918B - Virtual trusted platform based on hardware assistance and security processing method - Google Patents

Abstract

The application program in the virtual trusted platform uses a TSS (virtual security system) interface to write a request to be processed into an annular queue by calling a VirtIO (virtual input/output) front-end driver, the VirtIO rear-end driver acquires the request to be processed from the annular queue and sends the request to be processed to a password coprocessor encryption interface, the password coprocessor encryption interface sends the request to be processed to a password coprocessor by calling a password coprocessor driver, so that the password coprocessor performs secure operation processing on the request to be processed to obtain a processing result, the purpose of performing secure operation on data based on hardware is achieved, the security protection capability of the virtual trusted platform is enhanced, and the security of the data is improved.

Description

A hardware-assisted virtual trusted platform and security processing method

technical field

The present application relates to the field of computer technology, and in particular, to a hardware-assisted virtual trusted platform and a security processing method.

Background technique

Facing the security requirements in the 5G cloud-based network environment, a flexible and highly scalable virtual trusted platform is often deployed in the cloud-based architecture to enhance the security in the 5G cloud-based network environment.

However, in the current cloud environment, the virtual trusted platform has insufficient data security protection capability, resulting in poor data security. Moreover, the virtual trusted platform has poor data isolation effect.

SUMMARY OF THE INVENTION

This application provides the following technical solutions:

A security processing method is based on a virtual trusted platform, wherein the virtual trusted platform includes: a virtual machine user space, a virtual machine kernel space, a host user space and a host kernel space, wherein an application program and a host kernel space are deployed in the virtual machine user space. TSS interface, the virtual machine kernel space includes a virtual security device and a VirtIO front-end driver, the host user space at least includes a VirtIO back-end driver and a cryptographic coprocessor encryption interface, and the host kernel space includes a cryptographic coprocessor driver, The method includes:

The application uses the TSS interface to call the VirtIO front-end driver, and the VirtIO front-end driver writes the pending request into the ring queue;

The VirtIO backend driver obtains the pending request from the circular queue, and sends the pending request to the cryptographic coprocessor encryption interface;

The cryptographic coprocessor encryption interface sends the pending request to the cryptographic coprocessor by calling the cryptographic coprocessor driver, so that the cryptographic coprocessor performs secure operation processing on the pending request , obtain the processing result, and return the processing result to the application;

The application acquires the processing result.

Optionally, the returning the processing result to the application includes:

Return the processing result to the cryptographic coprocessor encryption interface through the cryptographic coprocessor driver;

The cryptographic coprocessor encryption interface returns the processing result to the VirtIO backend driver;

The VirtIO backend driver returns the processing result to the application through an interrupt injection mechanism.

Optionally, the cryptographic coprocessor has a binding relationship with the hardware security device in the host user space, and the binding relationship is established in the following manner:

The hardware security device applies for a hardware AIK certificate to the local certificate issuing authority after showing the EK key to the local certificate issuing authority to prove its identity;

The hardware security device issues an AIK certificate to the cryptographic coprocessor by using the hardware AIK certificate, so as to establish a binding relationship between the hardware security device and the cryptographic coprocessor.

Optionally, the method further includes:

Generate the EK key of the virtual security device based on the cryptographic coprocessor, and issue a certificate for the EK key of the virtual security device using the cryptographic coprocessor AIK key;

After the virtual security device uses the EK key of the virtual security device to prove its identity to the local certificate issuing authority, it applies to the local certificate issuing authority for a virtual AIK certificate, so that the local certificate issuing authority can issue a certificate to the local certificate issuing authority. The above virtual security device issues a virtual AIK certificate.

Optionally, the method further includes:

mapping the metric value in the register of the hardware security device in the user space of the host to the register of the virtual security device;

In the case of performing remote attestation on the virtual machine user space and the virtual machine kernel space, the virtual security device signs the metric value in the register of the virtual security device through the virtual AIK certificate to obtain the metric value signature;

The virtual security device sends the metric value signature and the metric value in the register of the virtual security device to the remote attestation device, so that the remote attestation device based on the metric value in the register of the virtual security device, The hardware security device performs trustworthiness certification, and based on the metric value signature and the metric value in the register of the virtual security device, performs trustworthiness certification on the virtual security device.

Optionally, the method further includes:

The virtual trusted platform obtains the migration command of the cloud computing migration control server, locks the virtual trusted platform, and packages the data associated with the virtual security device to obtain a data package;

The virtual trusted platform obtains the session encryption key allocated by the cloud computing migration control server to the virtual trusted platform, and the session encryption key is allocated in the following manner: based on the hardware security device in the virtual trusted platform Performing a trustworthy certification on the virtual trusted platform, and after proving that the virtual trusted platform is trustworthy, assigning a session encryption key to the virtual trusted platform;

The virtual trusted platform uses the session encryption key to encrypt the data packet to obtain encrypted data, and uses the cryptographic coprocessor to sign the encrypted data packet to obtain a data signature;

sending the encrypted data and the data signature to another virtual trusted platform, so that the other virtual trusted platform applies to the cloud computing migration control server for a session decryption key matching the session encryption key, The encrypted data is decrypted by using the session decryption key, and the data signature is verified.

A virtual trusted platform based on hardware assistance, comprising: a virtual machine user space, a virtual machine kernel space, a host user space and a host kernel space, an application program and a TSS interface are deployed in the virtual machine user space, and the virtual machine The kernel space includes a virtual security device and a VirtIO front-end driver, the host user space at least includes a VirtIO back-end driver and a cryptographic coprocessor encryption interface, and the host kernel space includes a cryptographic coprocessor driver;

The application program is used to call the VirtIO front-end driver by using the TSS interface;

The VirtIO front-end driver is used to write the pending request into the ring queue;

the VirtIO backend driver, configured to obtain the pending request from the circular queue, and send the pending request to the cryptographic coprocessor encryption interface;

the cryptographic coprocessor encryption interface for calling the cryptographic coprocessor driver;

The cryptographic coprocessor driver is configured to send the pending request to the cryptographic coprocessor, so that the cryptographic coprocessor performs secure operation processing on the pending request, obtains a processing result, and sends the received request to the cryptographic coprocessor. The processing result is returned to the application;

The application program is further configured to acquire the processing result.

Optionally, the cryptographic coprocessor encryption interface is further configured to receive the processing result returned by the cryptographic coprocessor through the cryptographic coprocessor driver, and return the processing result to the VirtIO back-end drive;

The VirtIO backend driver is further configured to return the processing result to the application through an interrupt injection mechanism.

Optionally, the virtual trusted platform further includes:

establishing a module for the hardware security device to apply for a hardware AIK certificate to the local certificate issuing authority after showing the EK key to the local certificate issuing authority to prove its identity;

The hardware security device issues an AIK certificate to the cryptographic coprocessor by using the hardware AIK certificate, so as to establish a binding relationship between the hardware security device and the cryptographic coprocessor.

Optionally, generating the EK key of the virtual security device based on the cryptographic coprocessor, and using the cryptographic coprocessor AIK certificate to issue a certificate for the EK key of the virtual security device;

The virtual security device is configured to apply for a virtual AIK certificate to the local certificate issuing authority after using the EK key of the virtual security device to prove its identity to the local certificate issuing authority, so that the local certificate is issued The institution issues a virtual AIK certificate to the virtual security device.

Optionally, also include:

mapping the metric value in the register of the hardware security device in the user space of the host to the register of the virtual security device;

In the case of performing remote attestation on the virtual machine user space and the virtual machine kernel space, the virtual security device is further configured to perform the measurement on the metric value in the register of the virtual security device by using the virtual AIK certificate signature, get the metric signature;

The virtual security device is further configured to send the metric value signature and the metric value in the register of the virtual security device to a remote attestation device, so that the remote attestation device is based on the metric value in the register of the virtual security device. A metric value, performing trusted certification on the hardware security device, and performing trusted certification on the virtual security device based on the metric value signature and the metric value in the register of the virtual security device.

Optionally, the virtual trusted platform is specifically used for:

Obtain the migration command of the cloud computing migration control server, lock the virtual trusted platform, and package the data associated with the virtual security device to obtain a data package;

Obtain a session encryption key allocated by the cloud computing migration control server to the virtual trusted platform, where the session encryption key is allocated in the following manner: based on the hardware security device in the virtual trusted platform for the virtual trusted platform The platform performs trustworthy certification, and after proving that the virtual trusted platform is trustworthy, assigns a session encryption key to the virtual trusted platform;

Utilize the session encryption key to encrypt the data packet to obtain encrypted data, and use the cryptographic coprocessor to sign the encrypted data packet to obtain a data signature;

Send the encrypted data and the data signature to the host user space of another virtual trusted platform, so that the host user space of the other virtual trusted platform applies to the cloud computing migration control server for the session encryption encryption. A session decryption key that matches the key, and the encrypted data is decrypted by using the session decryption key, and the data signature is verified.

Compared with the prior art, the beneficial effects of the present application are:

In this application, a virtual trusted platform is provided, in which the virtual machine kernel space includes a virtual security device and a VirtIO front-end driver, the host user space at least includes a VirtIO back-end driver and a cryptographic coprocessor encryption interface, and a host The kernel space contains a cryptographic coprocessor driver, wherein the application uses the TSS interface to write the pending request into the ring queue by calling the VirtIO front-end driver, and the VirtIO back-end driver obtains the pending request from the ring queue and stores the pending request. The processing request is sent to the cryptographic coprocessor encryption interface, and the cryptographic coprocessor encryption interface sends the pending request to the cryptographic coprocessor by invoking the cryptographic coprocessor driver, so that the cryptographic coprocessor can perform secure operation processing on the pending request. , obtain the processing result, realize the safe operation of the data based on the hardware, enhance the security protection capability of the virtual trusted platform, and improve the security of the data.

In addition, on the basis of the deployment of the VirtIO front-end driver, VirtIO back-end driver, cryptographic coprocessor encryption interface and cryptographic coprocessor driver on the virtual trusted platform, the cryptographic coprocessor performs encryption on the keys of different virtual trusted platforms. Isolate storage and use, when multiple virtual machines request cryptographic operations at the same time, it can ensure that different operations and keys do not interfere with each other, achieve instance isolation, and improve the isolation effect of virtual trusted platforms.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present application more clearly, the following briefly introduces the drawings that are used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without creative labor.

1 is a schematic diagram of the architecture of a hardware-assisted virtual trusted platform provided by the present application;

2 is a schematic flowchart of a security processing method provided in Embodiment 1 of the present application;

3 is a schematic flowchart of a security processing method provided in Embodiment 2 of the present application;

4 is a schematic diagram of a register mapping provided by the present application;

FIG. 5 is a schematic flowchart of a security processing method provided in Embodiment 3 of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

In order to solve the above problems, the present application provides a security processing method. Next, the security processing method provided by the present application will be introduced.

The security processing method provided by the present application is based on a virtual trusted platform, and the virtual trusted platform can be understood as: a hardware-assisted virtual trusted platform, as shown in FIG. 1 , the hardware-assisted virtual trusted platform may include: a virtual machine user space, virtual machine kernel space, host user space, host kernel space, and cryptographic coprocessors.

An application program and a TSS (TCG Trusted Protocol Stack) interface are deployed in the user space of the virtual machine; wherein, the TSS interface in the user space of the virtual machine is used to call the hardware security device (hardware TPM) in the user space of the host computer. It is obtained by multiplexing the TSS interface. Therefore, the function of the TSS interface in the user space of the virtual machine is the same as that of the TSS interface in the user space of the host.

The TSS interface in the virtual machine user space can be used to provide other security programs with a standard interface for using vtpm, and to call down the VirtIO front-end driver.

The virtual machine kernel space may include a virtual security device (vtpm) and a VirtIO front-end driver (VirtIOFE Driver).

The VirtIO front-end driver can be used to register vtpm, implement VirtQueue creation, Feature negotiation, and vtpm configuration reading.

VirtQueue can be understood as: VirtIO's front-end and back-end circular queues, which are used to implement data exchange between virtual machines and hosts. Through VirtQueue, you can find the underlying virtio-vring (which can be understood as the specific implementation of the VirtIO transmission mechanism) and then transmit data.

Feature defines the features supported by the client virtual machine and the host.

VirtIO is an I/O paravirtualization solution, a set of general-purpose I/O device virtualization programs, and an abstraction of a set of general-purpose I/O devices in a paravirtualized hypervisor. VirtIO abstracts a set of vring interfaces to complete the data sending and receiving process between the virtual machine and the host, and provides a set of communication frameworks and programming interfaces between upper-layer applications and vtpm (such as QEMU virtualization devices), reducing cross-platform requirements. The compatibility problems brought about greatly improve the efficiency of driver development.

In a specific implementation, VirtIO includes a VirtIO front-end driver located in the virtual machine kernel space and a VirtIO back-end driver located in the host user space. The VirtIO front-end driver and the VirtIO back-end driver communicate through a vring mechanism.

The virtual machine user space and the virtual machine kernel space form a virtual network element.

The host user space may at least include a VirtIO backend driver (VirtIO BE Driver) and a cryptographic coprocessor encryption interface (Crypto API).

The host user space may further include a hardware security device, and the hardware security device performs trusted protection on the data of the host.

The virtual security device management module can be deployed in the user space of the host but is not limited to. The virtual security device management module can be used to register the VirtIO back-end driver, start the virtual network element, and call the cryptographic coprocessor encryption interface.

The virtual security device management module can be but not limited to: QEMU emulator.

Cryptographic coprocessor cryptographic interface, which can be used to access the cryptographic coprocessor driver.

The host kernel space may contain a cryptographic co-processor driver (Crypto Co-processorDrive).

The cryptographic coprocessor driver can be used to access the cryptographic coprocessor.

In this embodiment, the cryptographic coprocessor and the hardware security device in the host user space have a binding relationship, and the binding relationship can be established in the following ways:

After the hardware security device shows the EK key to the local certificate issuing authority (CA, Certificate Authority) to prove its identity, it applies to the local certificate issuing authority for a hardware AIK certificate;

The hardware security device issues an AIK certificate to the cryptographic coprocessor by using the hardware AIK certificate, so as to establish a binding relationship between the hardware security device and the cryptographic coprocessor.

After the binding relationship between the hardware security device and the cryptographic coprocessor is established, the certificate linking from the hardware security device to the virtual security device can be implemented in the following manner:

The EK key of the virtual security device is generated based on the cryptographic coprocessor, and a certificate is issued for the EK key of the virtual security device using the cryptographic coprocessor AIK certificate.

After implementing the certificate chain from the hardware security device to the virtual security device, the extension of the certificate chain of the virtual security device can be done in the following ways:

After the virtual security device uses the EK key of the virtual security device to prove its identity to the local certificate issuing authority, it applies to the local certificate issuing authority for a virtual AIK certificate, so that the local certificate issuing authority can issue a certificate to the local certificate issuing authority. The above virtual security device issues a virtual AIK certificate.

Based on the above-mentioned virtual trusted platform, the security processing method provided by the present application may refer to FIG. 1, and the method may include the following steps:

Step S11, the application uses the TSS interface to call the VirtIO front-end driver, and the VirtIO front-end driver writes the pending request into the ring queue.

Step S12, the VirtIO backend driver obtains the pending request from the circular queue, and sends the pending request to the cryptographic coprocessor encryption interface.

Step S13: The cryptographic coprocessor encryption interface sends the pending request to the cryptographic coprocessor by calling the cryptographic coprocessor driver.

Step S14 , the cryptographic coprocessor performs security operation processing on the pending request, obtains a processing result, and returns the processing result to the application program.

In this embodiment, the process of returning the processing result to the application may include:

S141. Return the processing result to the cryptographic coprocessor encryption interface through the cryptographic coprocessor driver.

Step S15, the application acquires the processing result.

Corresponding to step S141, the process of acquiring the processing result by the application may include:

S151, the cryptographic coprocessor encryption interface returns the processing result to the VirtIO backend driver;

S152. The VirtIO backend driver returns the processing result to the application through an interrupt injection mechanism.

The VirtIO backend driver returns the processing result to the application program through an interrupt injection mechanism, so as to ensure the timeliness of the application program obtaining the processing result and improve the efficiency.

In this application, a virtual trusted platform is provided, in which the virtual machine kernel space includes a virtual security device and a VirtIO front-end driver, the host user space at least includes a VirtIO back-end driver and a cryptographic coprocessor encryption interface, and a host The kernel space contains a cryptographic coprocessor driver, wherein the application uses the TSS interface to write the pending request into the ring queue by calling the VirtIO front-end driver, and the VirtIO back-end driver obtains the pending request from the ring queue and stores the pending request. The processing request is sent to the cryptographic coprocessor encryption interface, and the cryptographic coprocessor encryption interface sends the pending request to the cryptographic coprocessor by invoking the cryptographic coprocessor driver, so that the cryptographic coprocessor can perform secure operation processing on the pending request. , obtain the processing result, realize the safe operation of the data based on the hardware, enhance the security protection capability of the virtual trusted platform, and improve the security of the data.

On the basis of deploying the VirtIO front-end driver, VirtIO back-end driver, cryptographic coprocessor encryption interface and cryptographic coprocessor driver on the virtual trusted platform, the cryptographic coprocessor isolates and saves the keys of different virtual trusted platforms When multiple virtual machines request cryptographic operations at the same time, it can ensure that different operations and keys do not interfere with each other, achieve instance isolation, and improve the isolation effect of virtual trusted platforms.

As another optional embodiment of the present application, referring to FIG. 3 , which is a schematic flowchart of a security processing method provided in Embodiment 2 of the present application. This embodiment is mainly an extension of the security processing method described in Embodiment 1 above. As shown in Figure 3, the method may include but is not limited to the following steps:

Step S21, the application uses the TSS interface to call the VirtIO front-end driver, and the VirtIO front-end driver writes the pending request into the ring queue.

Step S22, the VirtIO backend driver obtains the pending request from the circular queue, and sends the pending request to the cryptographic coprocessor encryption interface.

Step S23, the cryptographic coprocessor encryption interface sends the pending request to the cryptographic coprocessor by calling the cryptographic coprocessor driver.

Step S24, the cryptographic coprocessor performs security operation processing on the pending request, obtains a processing result, and returns the processing result to the application program.

Step S25, the application acquires the processing result.

For the detailed process of steps S21-S25, reference may be made to the related introduction of steps S11-S15, and details are not repeated here.

Step S26: The virtual security device maps the metric value in the register of the hardware security device in the user space of the host to the register of the virtual security device.

As shown in FIG. 4 , mapping the metric value in the register of the hardware security device in the host user space to the register of the virtual security device may include: mapping the hardware security device (hardware security device) in the host user space The metric values in the PCR0-7 registers of the TPM) are mapped into the PCR0-7 registers of the virtual security device (vTPM).

Step S27, in the case of performing remote attestation on the virtual machine user space and the virtual machine kernel space, the virtual security device signs the metric value in the register of the virtual security device through the virtual AIK certificate , get the metric signature.

Step S28, the virtual security device sends the metric value signature and the metric value in the register of the virtual security device to the remote attestation device, so that the remote attestation device is based on the measurement in the register of the virtual security device value, perform trusted certification on the hardware security device, and perform trusted certification on the virtual security device based on the metric value signature and the metric value in the register of the virtual security device.

In this embodiment, the virtual security device sends the metric value signature and the metric value in the register of the virtual security device to the remote attestation device, so that the remote attestation device is based on the register of the virtual security device. The metric value of the virtual security device is credible proof, and based on the metric value signature and the metric value in the register of the virtual security device, the virtual security device is credible proof, and the virtual security device is realized. The in-depth proof of network elements meets the trust requirements of virtual network elements in 5G cloud-based networks.

As another optional embodiment of the present application, referring to FIG. 5 , it is a schematic flowchart of a security processing method provided in Embodiment 3 of the present application. This embodiment is mainly an extension of the security processing method described in Embodiment 1 above. As shown in Figure 5, the method may include but is not limited to the following steps:

Step S31 , the application uses the TSS interface to call the VirtIO front-end driver, and the VirtIO front-end driver writes the pending request into the ring queue.

Step S32, the VirtIO backend driver obtains the pending request from the circular queue, and sends the pending request to the cryptographic coprocessor encryption interface.

Step S33: The cryptographic coprocessor encryption interface sends the pending request to the cryptographic coprocessor by calling the cryptographic coprocessor driver.

Step S34 , the cryptographic coprocessor performs security operation processing on the pending request, obtains a processing result, and returns the processing result to the application program.

Step S35, the application acquires the processing result.

For the detailed process of steps S31-S35, reference may be made to the related introduction of steps S11-S15, and details are not repeated here.

Step S36: The virtual security device management module in the host user space obtains the migration command of the cloud computing migration control server, locks the virtual trusted platform, and packages the data associated with the virtual security device to obtain a data package.

In this embodiment, locking the virtual trusted platform can be understood as: the virtual trusted platform no longer performs trusted measurement and calculation processing.

Step S37, the virtual security device management module obtains the session encryption key allocated by the cloud computing migration control server for the virtual trusted platform, and the session encryption key is allocated in the following manner: based on the virtual trusted platform The medium hardware security device certifies the trustworthiness of the host user space and the host kernel space, and allocates a session encryption key to the virtual trusted platform after proving that the host user space and the host kernel space are trustworthy .

Step S38, the virtual security device management module encrypts the data packet by using the session encryption key to obtain encrypted data, and uses the cryptographic coprocessor to sign the encrypted data packet to obtain a data signature.

Step S39, the virtual security device management module sends the encrypted data and the data signature to the host user space of another virtual trusted platform, so that the host user space of the other virtual trusted platform can send the data to the cloud computing platform. The migration control server applies for a session decryption key matching the session encryption key, decrypts the encrypted data by using the session decryption key, and verifies the data signature.

In this embodiment, by verifying the data signature, it is verified whether the migrated data has been tampered with, so as to ensure the integrity of the data.

After the host user space of another virtual trusted platform sends the migration completed information to the cloud computing migration control server, the cloud computing migration control server can send the migration completed information to the virtual trusted platform that sends the data, and the virtual trusted platform that sends the data can send the migration completed information to the cloud computing migration control server. The information platform will delete the migrated vTPM data in the cryptographic co-processor to ensure the uniqueness of the vTPM. At the same time, with the migration of vTPM, changes in the vTPM infrastructure have resulted. The vEK and vAIK certificates must be re-extended in the certificate chain to ensure the binding relationship between the vTPM and the hardware device.

Next, the virtual trusted platform provided by the present application will be introduced. The hardware-assisted virtual trusted platform described below and the security processing method described above may refer to each other correspondingly.

In this embodiment, as shown in FIG. 1 , the hardware-assisted virtual trusted platform includes: a virtual machine user space, a virtual machine kernel space, a host user space, a host kernel space, and a cryptographic coprocessor. The virtual machine user space There are application programs and TSS interfaces deployed in the virtual machine kernel space, the virtual machine kernel space includes a virtual security device and a VirtIO front-end driver, the host user space at least includes a VirtIO back-end driver and a cryptographic coprocessor encryption interface, and the host kernel space includes a password coprocessor driver.

The application program is used to call the VirtIO front-end driver by using the TSS interface;

The VirtIO front-end driver is used to write the pending request into the ring queue;

the VirtIO backend driver, configured to obtain the pending request from the circular queue, and send the pending request to the cryptographic coprocessor encryption interface;

the cryptographic coprocessor encryption interface for calling the cryptographic coprocessor driver;

the cryptographic coprocessor driver, configured to send the pending request to the cryptographic coprocessor;

the cryptographic coprocessor, configured to perform secure operation processing on the pending request, obtain a processing result, and return the processing result to the application;

The application program is further configured to acquire the processing result.

In this embodiment, the cryptographic coprocessor encryption interface is further configured to receive the processing result returned by the cryptographic coprocessor through the cryptographic coprocessor driver, and return the processing result to the VirtIO backend driver;

The VirtIO backend driver is further configured to return the processing result to the application through an interrupt injection mechanism.

In this embodiment, the virtual trusted platform further includes:

establishing a module for the hardware security device to apply for a hardware AIK certificate to the local certificate issuing authority after showing the EK key to the local certificate issuing authority to prove its identity;

The hardware security device issues an AIK certificate to the cryptographic coprocessor by using the hardware AIK certificate, so as to establish a binding relationship between the hardware security device and the cryptographic coprocessor.

In this embodiment, the cryptographic coprocessor is also used for:

generating the EK key of the virtual security device, and issuing a certificate for the EK key of the virtual security device;

The virtual security device is configured to apply for a virtual AIK certificate to the local certificate issuing authority after using the EK key of the virtual security device to prove its identity to the local certificate issuing authority, so that the local certificate is issued The institution issues a virtual AIK certificate to the virtual security device.

In this embodiment, the virtual security device can also be used for:

mapping the metric value in the register of the hardware security device in the user space of the host to the register of the virtual security device;

In the case of performing remote attestation on the virtual machine user space and the virtual machine kernel space, the metric value in the register of the virtual security device is signed by the virtual AIK certificate to obtain a metric value signature;

Send the metric value signature and the metric value in the register of the virtual security device to the remote attestation device, so that the remote attestation device can certify the hardware security device based on the metric value in the register of the virtual security device. Performing trusted certification, and performing trusted certification on the virtual security device based on the metric value signature and the metric value in the register of the virtual security device.

In this embodiment, the host user space may further include: a virtual security device management module, configured to:

Obtain the migration command of the cloud computing migration control server, lock the virtual trusted platform, and package the data associated with the virtual security device to obtain a data package;

Obtain a session encryption key allocated by the cloud computing migration control server to the virtual trusted platform, where the session encryption key is allocated in the following manner: based on the hardware security device in the virtual trusted platform for the virtual trusted platform The platform performs trustworthy certification, and after proving that the virtual trusted platform is trustworthy, assigns a session encryption key to the virtual trusted platform;

Utilize the session encryption key to encrypt the data packet to obtain encrypted data, and use the cryptographic coprocessor to sign the encrypted data packet to obtain a data signature;

Send the encrypted data and the data signature to the host user space of another virtual trusted platform, so that the host user space of the other virtual trusted platform applies to the cloud computing migration control server for the session encryption encryption. A session decryption key that matches the key, and the encrypted data is decrypted by using the session decryption key, and the data signature is verified.

It should be noted that, each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments may be referred to each other. As for the apparatus type embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for the relevant part, please refer to the partial description of the method embodiment.

Finally, it should also be noted that in this document, relational terms such as first and second are used only to distinguish one entity or operation from another, and do not necessarily require or imply these entities or that there is any such actual relationship or sequence between operations. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device that includes a list of elements includes not only those elements, but also includes not explicitly listed or other elements inherent to such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

For the convenience of description, when describing the above device, the functions are divided into various units and described respectively. Of course, when implementing the present application, the functions of each unit may be implemented in one or more software and/or hardware.

From the description of the above embodiments, those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the technical solutions of the present application can be embodied in the form of software products in essence or the parts that make contributions to the prior art, and the computer software products can be stored in storage media, such as ROM/RAM, magnetic disks , CD-ROM, etc., including several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of the present application.

A hardware-assisted virtual trusted platform and a security processing method provided by the present application have been described above in detail. The principles and implementations of the present application are described with specific examples in this paper. The description of the above embodiments is only for In order to help understand the method of the present application and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present application, there will be changes in the specific implementation and application scope. In summary, this specification The content should not be construed as a limitation on this application.

Claims (12)

1. a security processing method, it is characterized in that, based on virtual trusted platform, described virtual trusted platform comprises: virtual machine user space, virtual machine kernel space, host user space, host kernel space and cryptographic coprocessor, so An application program and a TSS interface are deployed in the virtual machine user space, the virtual machine kernel space includes a virtual security device and a VirtIO front-end driver, the host user space at least includes a VirtIO back-end driver and a cryptographic coprocessor encryption interface, and the The host kernel space contains the cryptographic coprocessor driver, which includes: The application uses the TSS interface to call the VirtIO front-end driver, and the VirtIO front-end driver writes the pending request into the ring queue; The VirtIO backend driver obtains the pending request from the circular queue, and sends the pending request to the cryptographic coprocessor encryption interface; The cryptographic coprocessor encryption interface sends the pending request to the cryptographic coprocessor by invoking the cryptographic coprocessor driver; The cryptographic coprocessor performs secure operation processing on the pending request, obtains a processing result, and returns the processing result to the application; The application acquires the processing result. 2. The method according to claim 1, wherein the returning the processing result to the application comprises: Return the processing result to the cryptographic coprocessor encryption interface through the cryptographic coprocessor driver, so that the cryptographic coprocessor encryption interface returns the processing result to the VirtIO backend driver; The application program obtains the processing result, including: The application program accepts the processing result returned by the VirtIO backend driver through the interrupt injection mechanism. 3. The method according to claim 1, wherein the cryptographic coprocessor has a binding relationship with a hardware security device in the host user space, and the binding relationship is established in the following manner: The hardware security device applies for a hardware AIK certificate to the local certificate issuing authority after showing the EK key to the local certificate issuing authority to prove its identity; The hardware security device issues an AIK certificate to the cryptographic coprocessor by using the hardware AIK certificate, so as to establish a binding relationship between the hardware security device and the cryptographic coprocessor. 4. The method according to claim 3, wherein the method further comprises: The cryptographic coprocessor generates the EK key of the virtual security device, and issues a certificate for the EK key of the virtual security device; After the virtual security device uses the EK key of the virtual security device to prove its identity to the local certificate issuing authority, it applies to the local certificate issuing authority for a virtual AIK certificate, so that the local certificate issuing authority can issue a certificate to the local certificate issuing authority. The above virtual security device issues a virtual AIK certificate. 5. The method according to claim 4, wherein the method further comprises: The virtual security device maps the metric value in the register of the hardware security device in the host user space to the register of the virtual security device; In the case of performing remote attestation on the virtual machine user space and the virtual machine kernel space, the virtual security device signs the metric value in the register of the virtual security device through the virtual AIK certificate to obtain the metric value signature; The virtual security device sends the metric value signature and the metric value in the register of the virtual security device to the remote attestation device, so that the remote attestation device based on the metric value in the register of the virtual security device, The hardware security device performs trustworthiness certification, and based on the metric value signature and the metric value in the register of the virtual security device, performs trustworthiness certification on the virtual security device. 6. The method of claim 1, wherein the method further comprises: The virtual security device management module in the host user space obtains the migration command of the cloud computing migration control server, locks the virtual trusted platform, and packages the data associated with the virtual security device to obtain a data package; The virtual security device management module obtains a session encryption key allocated by the cloud computing migration control server to the virtual trusted platform, and the session encryption key is allocated in the following manner: based on the hardware security in the virtual trusted platform; The device performs trustworthiness certification on the virtual trusted platform, and after proving that the virtual trusted platform is trustworthy, assigns a session encryption key to the virtual trusted platform; The virtual security device management module uses the session encryption key to encrypt the data packet to obtain encrypted data, and uses the cryptographic coprocessor to sign the encrypted data packet to obtain a data signature; The virtual security device management module sends the encrypted data and the data signature to the host user space of another virtual trusted platform, so that the host user space of the other virtual trusted platform is migrated to the cloud computing control server Apply for a session decryption key matching the session encryption key, decrypt the encrypted data by using the session decryption key, and verify the data signature. 7. A virtual trusted platform based on hardware assistance, comprising: a virtual machine user space, a virtual machine kernel space, a host user space, a host kernel space and a cryptographic coprocessor, wherein the virtual machine user space is deployed There are application programs and TSS interfaces, the virtual machine kernel space contains virtual security devices and VirtIO front-end drivers, the host user space at least contains VirtIO back-end drivers and cryptographic coprocessor encryption interfaces, and the host kernel space contains cryptographic coprocessors driver; The application program is used to call the VirtIO front-end driver by using the TSS interface; The VirtIO front-end driver is used to write the pending request into the ring queue; the VirtIO backend driver, configured to obtain the pending request from the circular queue, and send the pending request to the cryptographic coprocessor encryption interface; the cryptographic coprocessor encryption interface for calling the cryptographic coprocessor driver; the cryptographic coprocessor driver, configured to send the pending request to the cryptographic coprocessor; the cryptographic coprocessor, configured to perform secure operation processing on the pending request, obtain a processing result, and return the processing result to the application; The application program is further configured to acquire the processing result. 8 . The virtual trusted platform according to claim 7 , wherein the cryptographic coprocessor encryption interface is further configured to receive the cryptographic coprocessor returned by the cryptographic coprocessor driver through the cryptographic coprocessor driver. 9 . processing the result, and returning the processing result to the VirtIO backend driver; The VirtIO backend driver is further configured to return the processing result to the application through an interrupt injection mechanism. 9. The virtual trusted platform according to claim 7, wherein the virtual trusted platform further comprises: establishing a module for the hardware security device to apply for a hardware AIK certificate to the local certificate issuing authority after showing the EK key to the local certificate issuing authority to prove its identity; The hardware security device issues an AIK certificate to the cryptographic coprocessor by using the hardware AIK certificate, so as to establish a binding relationship between the hardware security device and the cryptographic coprocessor. 10. The virtual trusted platform according to claim 9, wherein the cryptographic coprocessor is further used for: generating the EK key of the virtual security device, and issuing a certificate for the EK key of the virtual security device; The virtual security device is configured to apply for a virtual AIK certificate to the local certificate issuing authority after using the EK key of the virtual security device to prove its identity to the local certificate issuing authority, so that the local certificate is issued The institution issues a virtual AIK certificate to the virtual security device. 11. The virtual trusted platform according to claim 10, wherein the virtual security device is further used for: mapping the metric value in the register of the hardware security device in the user space of the host to the register of the virtual security device; In the case of performing remote attestation on the virtual machine user space and the virtual machine kernel space, the virtual security device is further configured to perform the measurement on the metric value in the register of the virtual security device by using the virtual AIK certificate signature, get the metric signature; Send the metric value signature and the metric value in the register of the virtual security device to the remote attestation device, so that the remote attestation device can certify the hardware security device based on the metric value in the register of the virtual security device. Performing trusted certification, and performing trusted certification on the virtual security device based on the metric value signature and the metric value in the register of the virtual security device. 12. The virtual trusted platform according to claim 7, wherein the host user space further comprises: a virtual security device management module for: Obtain the migration command of the cloud computing migration control server, lock the virtual trusted platform, and package the data associated with the virtual security device to obtain a data package; Obtain a session encryption key allocated by the cloud computing migration control server to the virtual trusted platform, where the session encryption key is allocated in the following manner: based on the hardware security device in the virtual trusted platform for the virtual trusted platform The platform performs trustworthy certification, and after proving that the virtual trusted platform is trustworthy, assigns a session encryption key to the virtual trusted platform; Utilize the session encryption key to encrypt the data packet to obtain encrypted data, and use the cryptographic coprocessor to sign the encrypted data packet to obtain a data signature; Send the encrypted data and the data signature to the host user space of another virtual trusted platform, so that the host user space of the other virtual trusted platform applies to the cloud computing migration control server for the session encryption encryption. A session decryption key that matches the key, and the encrypted data is decrypted by using the session decryption key, and the data signature is verified.

Images