An XEN Platform Based Trusted Virtual Machine Migration Protocol

A suitable vTPM key hierarchy for migration was used to ensure the safety of the trusted virtual machine migration and to reduce the key reduction in the destination after migration.Based on the vTPM key hierarchy,proposed an improved trusted virtual machine migration protocol,which was added with matual identity and platform state certification.Firstly,to ensure the vTPM key reused in the destination,a intermediate layer,which was consists of gSRK and SK,was imported to realize the indirect protection and signature to vSRK and vAIK.Secondly,added the matual identity and platform state certification before migration,and used the D-H algorithm to negotiate session key,establishing a trusted communication channel for both sides.Finally,realized the trusted virtual machine migration based on the XEN platform and the session key.Analysis shows that,the protocol can effectively guarantee the trusted virtual machine migration safety requirements.