Integrity Measurement Model Based on Trusted Virtual Platform

Abstract

A secure and trusted execution environment is a fundamental requirement for distributed network, so that the integrity of service provider platform should be verified prior to services' distribution in order to assure that the platform is free from a malicious modification and attack. In this paper, we proposed an implementation of trusted execution environment based on the combination of trusted computing and virtualization technology. On the service provider's platform, from the very beginning of Virtual Machine Monitor (VMM) was booted to the execution environment was set up, all of the platform status changes has been recorded into Platform Configuration Register (PCR) and reported to remote service requester, which make it sure about the trustworthy of the result. Furthermore, the VM image was leveraged to make the execution environment constructed more flexible. Analysis shows our method is efficient and secure.