A Hypervisor-Based Secure Storage Scheme

Author

Wang, Dan ; Feng, Dengguo

Author_Institution

Inst. of Software, Chinese Acad. of Sci., Beijing, China

Volume

1

fYear

2010

fDate

24-25 April 2010

Firstpage

81

Lastpage

86

Abstract

We demonstrate an approach for data security in a virtual platform that seals data to the properties of system components with the trusted platform module (TPM). Based on the hypervisor, there are some trusted services provided to support sealing and unsealing so that the TPM can serve all virtual machines (VMs). We implement the prototype system on the Xen hypervisor which has no evident decrease in efficiency compared with the current property-based sealing solutions. We show that, through our architecture, a piece of confidential data can be used securely in all VMs co-hosted on one platform.

Keywords

security of data; virtual machines; virtual reality; Xen hypervisor; data security; hypervisor-based secure storage scheme; property-based sealing solutions; trusted platform module; virtual machines; virtual platform; Data security; Hardware; Information security; Protection; Seals; Secure storage; Virtual machine monitors; Virtual machining; Virtual manufacturing; Voice mail; hypervisor; property-based sealing; trusted platform module;

fLanguage

English

Publisher

ieee

Conference_Titel

Networks Security Wireless Communications and Trusted Computing (NSWCTC), 2010 Second International Conference on

Conference_Location

Wuhan, Hubei

Print_ISBN

978-0-7695-4011-5

Electronic_ISBN

978-1-4244-6598-9

Type

conf

DOI

10.1109/NSWCTC.2010.27

Filename

5481125