Huawei Technologies Co., Limited

Xun Shi

Sihai Ye

Jianfeng Liu

Juan Wang

Shiqian Li

Fengshao Zou

Bo Zhao

Huanguo Zhang

Yunfei Li

Lun Lian

Fei Yan

A method for trusted measurement of a cloud computing platform includes: generating, by a third-party management and audit system, an audit report based on a current running indicator, signed by using a digital certificate, of a software and a running security indicator of the software, where the audit report indicates trustworthiness of a cloud computing platform. In this way, a process of trusted measurement of the cloud computing platform is open and transparent, so that authenticity of trusted measurement of the cloud computing platform is improved, thereby increasing a user's trust in the cloud computing platform.

Method and apparatus for trusted measurement of cloud computing platform

The present application discloses a virtual trusted platform module (vTPM)-based virtual machine security protection method and system. The method, executed by a physical host, includes: receiving a primary seed acquisition request sent by a virtual machine, where the primary seed acquisition request carries a UUID; sending the UUID to a KMC, so that the KMC generates a primary seed according to the UUID; and receiving the primary seed fed back by the KMC, and sending the primary seed to the virtual machine, so that the virtual machine creates a root key of a vTPM according to the primary seed, where the root key is used by the vTPM to create a key for the virtual machine to protect security of the virtual machine. As such, the same root key can be created by using the primary seed.

VTPM-based virtual machine security protection method and system

A measurement method, an electronic device, and a measurement system where the electronic device reads, from a hardware storage device, running code and running data that are in a running process of a virtual machine manager (VMM), and generates first verification information according to the running code and the running data, and the electronic device stores the first verification information, and transmits, to a trusted data center, log information generated in a process that is from reading, by the electronic device, the running code and the running data to storing, by the electronic device, the first verification information such that the trusted data center measures the electronic device using the first verification information acquired from the electronic device and second verification information generated according to the log information.

Measurement method, electronic device, and measurement system

A security control platform receives a virtual machine starting request message that is from user equipment and forwarded by a management platform, where the virtual machine starting request message includes an identifier of a virtual machine that needs to be enabled and user information; invokes a third-party trusted platform to determine that the virtual machine starting request message is initiated by the user equipment according to an instruction of an authorized user; and performs authentication on the user information, and based on successful authentication, invokes the third-party trusted platform to decapsulate the virtual machine that needs to be enabled. It is ensured that other user equipment (including the management platform) cannot obtain a key of the third-party trusted platform, which enhances security of management control on the virtual machine, and thereby enhances security of a cloud computing platform.

Management control method, apparatus, and system for virtual machine

A method for implementing communication services includes: after receiving a call request, determining whether a user subscribes to an IP Centrex service and an intelligent network (IN) service according to the obtained subscription information of the user; if the user subscribes to the IP Centrex service and IN service, checking with an application server (AS) whether the call request is for an intra-group call; if the call request is for an intra-group call, performing corresponding service processing according to the checking result to implement discount charging on the intra-group call. By using the method of the present invention, if the user subscribes to the IP Centrex service and the IN service, no conflict occurs between the IP Centrex service and the IN service, and discount charging is implemented on the intra-group call. A network device and a mobile communication system are also provided.

Growing community of inventors

Shenzhen, China

Xun Shi