Establishment of Security Levels in Trusted Cloud Computing Platforms

Cloud computing, which provides online resources as a service to users, brings a technology revolution in IT world. However, the data security and privacy on cloud is an important issue, becoming the biggest barrier of cloud computing development. A Trusted Cloud Computing Platform (TCCP) based on remote attestation build a trusted cloud for tenant. The critical section is centralized Trusted Coordinator, taking the place of tenants to authenticate nodes individually in cloud computing platform. But, when a lot of tenants apply for nodes at the same time, Trusted Coordinator (TC) maybe can't deal with these requests quickly. To address this problem, we propose the establishment of security-level for different applications in TCCPs, which divides Trusted Coordinator into three, each responsible for authenticating different application kind. TC would implement different authentication policies, such as user password comparison, image hash verification and trusted chain measurement, according to different security levels.