TRUSTWORTHINESS MEASURING METHOD AND DEVICE FOR CLOUD COMPUTING PLATFORM

摘要

A method for trusted measurement of a cloud computing platform. The method includes: receiving, by a third-party management and audit system, a current running indicator of software on a cloud computing platform, where the current running indicator of the software is signed by a trusted platform of the cloud computing platform by using a digital certificate issued by a certification authority; obtaining, by the third-party management and audit system, a running security indicator of the software from a third-party assessment organization; and generating, by the third-party management and audit system, an audit report based on the current running indicator, signed by using the digital certificate, of the software and the running security indicator of the software, where the audit report is used to indicate trustworthiness of the cloud computing platform. In this way, a process of trusted measurement of the cloud computing platform is open and transparent, so that authenticity of trusted measurement of the cloud computing platform is improved, thereby increasing a user's trust in the cloud computing platform.