CONTAINER PLATFORM-ORIENTED TRUSTED SOFTWARE AUTHORIZATION AND VERIFICATION SYSTEM AND METHOD

摘要

A container platform-oriented trusted software authorization and verification system and method, comprising: a module for building public key infrastructure, a module for building a container image identity, a module for building a signature list, a module for verifying a container image, a module for loading the signature list and a user certificate, and a module for verifying a container program. The method may conveniently authorize the container image and software running in the container, and verify the container image and the program in the container at an appropriate time, finally ensuring that the container image running on a container platform is trusted. At the same time, the software running in the container is also trusted, thereby improving the security of the container platform.