Research on eID-Based Virtual Machine Trusted Attestation System in IaaS Cloud

doi:10.13190/j.jbupt.2014.05.018

JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM ›› 2014, Vol. 37 ›› Issue (5): 85-90.doi: 10.13190/j.jbupt.2014.05.018

• Reports • Previous Articles Next Articles

Research on eID-Based Virtual Machine Trusted Attestation System in IaaS Cloud

WU Xu^1,2, XU Jin^1,2, LI Chun-wen³, LIU Chuan-yi^1,2

1. School of Computer Science, Beijing University of Posts and Telecommunications, Beijing 100876, China;
2. Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education, Beijing 100876, China;
3. Software Development Center, Head Office of the Agricultural Bank of China, Beijing 100073, China

Received:2013-10-17 Online:2014-10-28 Published:2014-11-07

Abstract

Abstract:

In cloud computing, the data and computation migration gives rise to trust problems between the user and the cloud. Including the hardware platform, the multiple dimensions method was studied, as well as the user identity and behavior. The electronic identity (eID)-based virtual machine trusted attestation system in infrastructure-as-a-service (IaaS) cloud was designed. The hardware platform was used for trust third party architecture. The citizen's network eID was used as users unique authoritative identity. The credit records were also applied to evaluate the user's behaviors. Four steps were adopted to solve the trust problem between two sides, including trusted attestation of the user identification and trusted attestation of the virtual machine. Experiment analysis shows that this system can defend common attacks, it is more safety, and the time complexity is within acceptable limitations.

Key words: trust computing, cloud computing, infrastructure as a service, electronic identity, remote attestation

CLC Number:

TP309.1

WU Xu, XU Jin, LI Chun-wen, LIU Chuan-yi. Research on eID-Based Virtual Machine Trusted Attestation System in IaaS Cloud[J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2014, 37(5): 85-90.

References

[1] Pearson S. Privacy, security and trust in cloud computing[M]. [S.l.]: Springer London, 2013: 3-42.

[2] Huang J, Nicol D M. Trust mechanisms for cloud computing[J]. Journal of Cloud Computing, 2013, 2(1): 1-14.

[3] Trusted Computing Platform Alliance (TCPA). TCPA main specification version 1.1b[R]. Trusted Computing Group, 2002: 2-9.

[4] Imran K, Rehman H, Zahid A. Design and deployment of a trusted eucalyptus cloud[C]//2011 IEEE International Conference on Cloud Computing(CLOUD). Washington DC: IEEE, 2011: 380-387.

[5] Xin Siyuan, Zhao Yong, Li Yu. Property-based remote attestation oriented to cloud computing[C]//2011 Seventh International Conference on Computational Intelligence and Security. Sanya: [s.n.], 2011: 1028-1032.

[6] Manik L D, Ashutosh S, Ved P G. A dynamic ID-based remote user authentication scheme[J]. IEEE Transactions on Consumer Electronics, 2004, 50(2): 629-631.

[7] Wang Y, Liu J, Xiao F, et al. A more efficient and secure dynamic ID-based remote user authentication scheme[J]. Computer Communications, 2009, 32(4): 583-585.

[8] Lee H, Choi D, Lee Y, et al. Security weaknesses of dynamic ID-based remote user authentication protocol[J]. Proceedings of the World Academy of Science Engineering and Technology, 2009, 59: 190-193.

[9] Yu Jinwei. The program design for the network security authentication based on the USB key technology[C]//2011 International Conference on Electronic and Mechanical Engineering and Information Technology. [S.l.]: IEEE, 2011: 2215-2218.

[10] Chuang M C, Chen M C. An anonymous multi-server authenticated key agreement scheme based on trust computing using smart cards and biometrics[J]. Expert Systems with Applications, 2014, 41(4): 1411-1418.

[11] 林闯, 田立勤, 王元卓. 可信网络中用户行为可信的研究[J]. 计算机研究与发展, 2008, 45(12): 2033-2043. Lin Chuang, Tian Liqin, Wang Yuanzhuo. Research on user behavior trust in trustworthy network[J]. Journal of Computer Research and Development, 2008, 45(12): 2033-2043.

[12] Tian L, Lin C, Ni Y. Evaluation of user behavior trust in cloud computing[C]//Computer Application and System Modeling (ICCASM), International Conference on. [S.l.]: IEEE, 2010: 567-572.

[13] Dewangan M B K, Shende M P. Survey on user behavior trust evaluation in cloud computing[J]. International Journal of Science, Engineering and Technology Research, 2012, 1(5): 113-117.

[14] Lin Honggang. Research on trust-degree based dynamic access control model[C]//E-Product E-Service and E-Entertainment (ICEEE), 2010 International Conference on. [S.l.]: IEEE, 2010: 1-4.

[15] Lin G, Bie Y, Lei M. Trust based access control policy in multi-domain of cloud computing[J]. Journal of Computers, 2013, 8(5): 5-10.

Research on eID-Based Virtual Machine Trusted Attestation System in IaaS Cloud

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments

[1]	ZHANG Zhi-hua, WANG Meng-qing, MAO Wen-tao, LIU Chun-hong, CHENG Bo. Joint Prediction of Multi-Workload Sequences Based on Temporal Correlation in the Cloud [J]. Journal of Beijing University of Posts and Telecommunications, 2020, 43(4): 68-75.
[2]	YIN Xue-yuan, CHEN Xing-shu, LI Hui, CHEN Lin. A Method to Implement File Antivirus Based on Virtualization [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2018, 41(2): 50-55.
[3]	ZHU Xiao-ning, SUN Bin, ZHU Chun-ge. Reliability Evaluation Model of Large Scale Cloud Resources [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 53-57.
[4]	WANG Li-yu, SUN Bin, QIN Tong. Application of Improved DBSCAN Clustering Algorithm in Task Scheduling of Cloud Computing [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 68-71.
[5]	XU Jiu-yun, GUAN Chao, JIANG Dan. A Subjectivity and Time-Varying Reputation-Oriented Trust Management Method in Cloud Services [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(5): 30-35.
[6]	LIU Jing, WU Hai-bo, WANG Shao-shuai, JIA Lei. A Colored Petri Nets Model Based Cloud Test Generation Approach and Implementation System [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2016, 39(5): 89-93,115.
[7]	XIAO Ding, JIA Ya-pu, SHI Chuan. Non-liner Energy Consumption Model for Cloud Computing [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2016, 39(1): 107-111.
[8]	GUO Li-zheng, ZHANG Yi-fei, ZHAO Shu-guang. Optimization Method of Performance and Energy Consumption Aware under Data Center Environment [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2015, 38(s1): 72-76.
[9]	YU Jun-yang, HU Zhi-gang, LIU Xiu-lei. Smallfiles on HDFS Merging based on the Energy Efficiency [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2015, 38(6): 34-38.
[10]	WU Bin, LIN Xing, LI Wei-dong, LU Tian-liang, ZHANG Dong-mei. Smartphone Malware Detection Model Based on Artificial Immune System in Cloud Computing [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2015, 38(4): 34-38.
[11]	WANG Ting, XU Ke, WANG Na, SONG Jun-de. Optimized Scalable Scheme for Server Selections in Cloud Computing Environments [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2014, 37(s1): 83-86.
[12]	QIAO Yuan-yuan, LIU Fang, LING Yan, YIN Jin-song. Resource Modeling and Performance Prediction of MapReduce in Cloud Computing Environment [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2014, 37(s1): 115-119.
[13]	LIU Xing, YUAN Chao-wei, YANG Zhen, HU Zhong-wei. User Handoff and Access Control Based on Mobile Agent in Mobile Cloud Computing [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2014, 37(2): 88-92.
[14]	SONG Jie, LI Tian-tian, YAN Zhen-xing, ZHU Zhi-liang. Load-Balanced Data Layout Approach in Data-Intensive Computing [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2013, 36(4): 76-80.
[15]	LIU Chuan-yi, FANG Bin-xing, LIN Jie. Modular Destruction for the Infrastructure as a Service Cloud [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2013, 36(2): 38-43.