隨著近幾年網路設備效能的大幅度提升，對網路效能高依賴的雲端計算技術成為現今當紅的熱門話題，有鑒於虛擬技術在雲端計算中廣泛的應用，雲端服務提供商能透過虛擬技術來調整所提供的資源，讓提供的服務資源能更貼近不同使用者的實際需求。而其中能做到上述項目的一個重要技術即為虛擬機動態遷移。 但是在多人共用資源的雲端環境中，安全性一直是個很重要的隱憂，尤其是在開放式的雲端環境中，不但得防範週遭共用資源的其他使用者，甚至是擁有特權的系統管理者是否能完全信任？ 本論文提出一高安全性的虛擬機動態遷移機制，以及對應必要的可信賴計算平台架構，平台的最根本信賴元件是TPM，利用TPM帶起的可信賴VMM，避免使用者因為使用雲端計算資源造成本身機密資料洩漏。將信賴基礎建立在可信賴的計算平台上，利用平台提供的驗證機制，降低使用者使用雲端平台時的安全疑慮；同時加強虛擬機動態遷移機制的安全性，對本機端以及遠端主機做信賴驗證，確保雙方主機的互信原則，再以vTPM為輔助，為使用者資料提供更多的安全保障，避免因為虛擬機動態遷移所意外導致的使用者資料外洩發生。 The performance of network devices in recent years are improved significantly and the Cloud Computing which highly depends on the network performance becomes hot topics today. As the virtualization is widely deployed in the Cloud, the Cloud service provider can fix their provided resource by the virtualization and make the service resource more conformed to different users’ real requirements. An important technology for doing this is VMs’ live migration. In an environment with people share the resource like the Cloud computing, the security is always a very serious concern, especially in a public Cloud. We need prevent not only the other users which share the resource, but even the system administrator who has the privilege. Can we totally trust them? We present a mechanism for a highly secured VMs’ live migration and the secured platform in this paper. The root of trusted component in the platform is TPM. We use TPM to boot the trusted VMM and protect the users’ data for not leaking when use the Cloud Computing resource. We make the base of the trust depend on the trusted computing platform, and use the attestation mechanism supported by the platform to reduce the security concern when using the Cloud platform. We also enhance the security of VMs’ live migration at the same time, and do the trusted attestation to local and remote hosts to make sure the trust between each host. We provide more security protect for the users’ data by vTPM to prevent users’ data lost when the VMs migrate.
