WO2021139308A1

WO2021139308A1 - Cloud server monitoring method, apparatus and device, and storage medium

Info

Publication number: WO2021139308A1
Application number: PCT/CN2020/122338
Authority: WO
Inventors: 胡俊文
Original assignee: 平安科技（深圳）有限公司
Priority date: 2020-06-16
Filing date: 2020-10-21
Publication date: 2021-07-15
Also published as: CN111737081A; CN111737081B

Abstract

The present application relates to the field of artificial intelligence. Disclosed are a cloud server monitoring method, apparatus and device, and a storage medium. The cloud server monitoring method comprises: detecting whether there is currently a cloud server timing monitoring task; if there is, obtaining a corresponding hardware environment monitoring value and/or software environment monitoring value according to a preset hardware trustworthiness integrity verification policy and/or software trustworthiness integrity verification policy, respectively determining whether said values are consistent with a hardware environment reference value and/or a software environment reference value, and if not consistent, determining whether the current cloud server meets a preset alarm condition; and if the alarm condition is met, generating a hardware trustworthiness report and/or a software trustworthiness report and sending same to a corresponding user. The solution can realize security monitoring of a cloud server by a user, so as to guarantee the security of data on the cloud server. In addition, the present application also relates to blockchain technology. The hardware environment reference value and/or the software environment reference value can be stored in a blockchain.

Description

Cloud server monitoring method, device, equipment and storage medium

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office, the application number is 202010547614.7, and the invention title is "cloud server monitoring method, device, equipment and storage medium" on June 16, 2020, the entire content of which is incorporated by reference In application.

Technical field

The present invention relates to the field of artificial intelligence logic programming, in particular to a cloud server monitoring method, device, equipment and storage medium.

Background technique

With the development of the Internet, more and more companies need to build servers to provide online services to the outside world. However, for small and medium-sized users, the cost of buying, building, and maintaining servers is too expensive. Therefore, cloud servers came into being. To put it simply, the cloud service provider that provides the cloud server is responsible for purchasing hardware equipment and providing basic Internet services such as computing, storage, online backup, and the user only needs to use the connection interface to perform system deployment, software configuration and maintenance on the provider’s server Operations, and can even be fully managed to a provider. Thereby reducing the user's online service expenditure cost and improving service efficiency.

However, the inventor realized that because the user semi-hosted the service, or even fully hosted the service to the cloud service provider, the user may not be able to know if problems such as information leakage or environmental damage occur during the service process. For example, when cloud service providers discover that a server's hard disk fails, they will replace the original hard disk with the backup hard disk. If commercial secrets are stored on the hard disk, there is a serious risk of data leakage. Therefore, there is an urgent need for a mechanism to effectively monitor the environmental integrity of cloud servers, so as to reduce the possibility of risks in the process of providing cloud services.

Summary of the invention

The main purpose of this application is to solve the problem that users cannot monitor the environmental integrity of the cloud server.

The first aspect of this application provides a cloud server monitoring method, including:

Detect whether there is a scheduled monitoring task for the cloud server currently;

If there is a cloud server scheduled monitoring task currently, it will trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

Wherein, the cloud server hardware trusted integrity check includes: generating a hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity check strategy, and judging the hardware environment monitoring value and the preset hardware Whether the environmental benchmark values are consistent;

If the hardware environment monitoring value is consistent with the hardware environment reference value, trigger execution of cloud server software trusted integrity check;

Wherein, the cloud server software trusted integrity check includes: generating a software environment monitoring value corresponding to the current cloud server according to a preset software trusted integrity check strategy, and judging the software environment monitoring value and the preset software Whether the environmental benchmark values are consistent;

If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, then waiting to enter the next round of regular monitoring tasks;

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, determining whether the current cloud server meets the preset alarm condition;

If the alarm conditions are met, a hardware credibility report and/or a software credibility report corresponding to the current cloud server is generated and sent to the corresponding cloud server rental user.

A second aspect of the present application provides a cloud server monitoring device. The cloud server monitoring device includes a memory, a processor, and a cloud server monitoring program that is stored on the memory and can run on the processor. The processor implements the following steps when executing the cloud server monitoring program:

Wherein, the cloud server hardware trusted integrity check includes: generating a hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity check strategy, and judging the hardware environment monitoring value and the preset hardware Whether the environmental reference value is consistent; if the hardware environment monitoring value is consistent with the hardware environment reference value, trigger the execution of cloud server software trusted integrity check;

A third aspect of the present application provides a computer-readable storage medium that stores computer instructions, and when the computer instructions are executed on a computer, the computer executes the following steps:

The fourth aspect of the present application provides a cloud server monitoring device, including:

The detection module is used to detect whether there is a scheduled monitoring task of the cloud server currently;

The verification module is used to trigger the execution of the cloud server hardware credible integrity verification if there is a cloud server timing monitoring task currently;

Wherein, the verification module includes:

The hardware verification unit is used to perform cloud server hardware trusted integrity verification, which specifically includes: generating the hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity verification strategy, and judging the hardware environment Whether the monitoring value is consistent with the preset hardware environment reference value; if the hardware environment monitoring value is consistent with the hardware environment reference value, trigger the execution of the cloud server software trusted integrity check;

The software verification unit is used to perform cloud server software credible integrity verification, which specifically includes: generating the software environment monitoring value corresponding to the current cloud server according to a preset software credible integrity verification strategy, and judging the software environment Whether the monitoring value is consistent with the preset software environment reference value;

The standby module is configured to wait to enter the next round of regular monitoring tasks if the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value;

A judgment module, configured to judge whether the current cloud server meets preset alarm conditions if the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value;

The alarm module is configured to generate a hardware credibility report and/or software credibility report corresponding to the current cloud server if the alarm condition is met, and send it to the corresponding cloud server rental user.

In the solution of this application, it is first to detect whether there is a regular monitoring task, and if it exists, a hardware credible integrity check is performed to determine whether the hardware environment of the current cloud server is complete. After passing, the software credible integrity check is performed. To judge whether the software environment of the current cloud server is complete, if all pass, wait for the next monitoring. If it fails, a hardware credibility report and/or a software credibility report are generated and sent to the user. Therefore, this application can implement timing monitoring of the cloud server from the two levels of the hardware environment and the software environment, thereby reducing the risk of data leakage and improving the security of the user's data. In addition, since the hardware/software environment integrity check is based on the credible preset hardware/software environment benchmark values, in order to ensure the credibility of the hardware/software environment benchmark values, this solution uses the hardware/software environment The environmental reference value is stored in the NV space of the trusted chip or on the blockchain. In order to improve the flexibility of monitoring, the hardware/software trusted integrity verification strategies provided by this application are freely selectable and updateable. In addition, in this application, to ensure the rigor of monitoring, it is set to issue a hardware credibility report and/or a software credibility report when the number of untrusted times found by monitoring reaches a certain threshold.

Description of the drawings

FIG. 1 is a schematic diagram of a first embodiment of a cloud server monitoring method in an embodiment of this application;

Figure 2-1 is a schematic diagram of the hardware/software trusted integrity check policy configuration part in the second embodiment of the cloud server monitoring method in the embodiment of the application;

2-2 is a schematic diagram of monitoring a cloud server in the second embodiment of the cloud server monitoring method in the embodiment of this application;

3 is a schematic diagram of a third embodiment of a cloud server monitoring method in an embodiment of this application;

4 is a schematic diagram of a fourth embodiment of a cloud server monitoring method in an embodiment of this application;

FIG. 5 is a schematic diagram of a first embodiment of a cloud server monitoring device in an embodiment of this application;

FIG. 6 is a schematic diagram of a second embodiment of a cloud server monitoring device in an embodiment of this application;

Fig. 7 is a schematic diagram of an embodiment of a cloud server monitoring device in an embodiment of the application.

Detailed ways

The embodiments of the application provide a cloud server monitoring method, device, equipment, and storage medium. In the solution of the application, first detect whether there is a regular monitoring task, and if so, perform a hardware trustworthiness integrity check to determine the current cloud Whether the hardware environment of the server is complete, after passing, the software trusted integrity check is performed to determine whether the software environment of the current cloud server is complete, and if all are passed, wait for the next monitoring. If it fails, a hardware credibility report and/or a software credibility report are generated and sent to the user. Therefore, this application can implement timing monitoring of the cloud server from the two levels of the hardware environment and the software environment, thereby reducing the risk of data leakage and improving the security of the user's data.

The terms "first", "second", "third", "fourth", etc. (if any) in the description and claims of this application and the above-mentioned drawings are used to distinguish similar objects, without having to use To describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances so that the embodiments described herein can be implemented in a sequence other than the content illustrated or described herein. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those clearly listed. Steps or units, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or equipment.

For ease of understanding, the following describes the specific process of the embodiment of the present application. Please refer to FIG. 1. The first embodiment of the cloud server monitoring method in the embodiment of the present application includes:

101. Detect whether there is a cloud server timing monitoring task currently;

It is understandable that the execution subject of this application may be a cloud server monitoring device, or may also be a terminal or a server, etc., which is not specifically limited here. The embodiment of the present application takes the cloud server monitoring device as the execution subject as an example for description.

In this embodiment, the device is equipped with a cloud server verification strategy preset by the cloud server rental user. The verification strategy includes a monitoring cycle, and every other monitoring cycle, the pair will initiate a monitoring task on the cloud server. Therefore, during the operation of the device, it is detected whether there is a regular monitoring task of the cloud server.

102. If there is currently a cloud server timing monitoring task, trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

Wherein, the cloud server hardware trusted integrity check includes:

According to the preset hardware trusted integrity check strategy, the hardware environment monitoring value corresponding to the current cloud server is generated, and it is judged whether the hardware environment monitoring value is consistent with the preset hardware environment reference value; if the hardware environment monitoring value is consistent with all If the hardware environment reference values are consistent, the cloud server software trusted integrity check will be triggered;

In this embodiment, the hardware trusted integrity check strategy preset by the developer is applied to the device. Before the cloud server is leased, the device first obtains the attribute value of the hardware specified in the hardware trusted integrity check policy. Then, the first measurement algorithm specified in the hardware trusted integrity check strategy is used to calculate the attribute value of the hardware to obtain the hardware environment reference value. In order to protect the reliability of the hardware environment reference value, this solution preferably stores the hardware environment reference value on a trusted security chip or blockchain.

Then, the first measurement algorithm is used to calculate the attribute value of the hardware corresponding to the current cloud server to obtain the corresponding hardware environment monitoring value, which is compared with the hardware environment reference value.

If the hardware environment monitoring value is consistent with the hardware environment reference value, it indicates that the hardware environment of the current cloud server is complete, and then the cloud server software trusted integrity check is performed.

When cloud server leasing users first start using cloud servers, they will collect their selected cloud server verification policy configuration parameters, including software trusted integrity verification policies. The strategy includes a second measurement algorithm and a designated software name. In the first run, first obtain the corresponding software file according to the specified software name, and then obtain the corresponding software environment monitoring value through the second measurement algorithm.

103. If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, wait to enter the next round of timing monitoring tasks;

If the software environment monitoring value is consistent with the software environment, it means that the current software environment is complete, so it waits for the next round of timing monitoring tasks.

104. If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, determine whether the current cloud server meets a preset alarm condition;

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, it means that the current cloud server may be at risk. In order to provide the rigor of monitoring and avoid false warnings caused by false alarms. Each inconsistency is counted, and when the technology reaches the preset threshold, it is determined that the current cloud server meets the preset alarm conditions.

105. If the alarm condition is met, generate a hardware credibility report and/or a software credibility report corresponding to the current cloud server and send it to the corresponding cloud server rental user.

If the alarm conditions are met, the preset report template is obtained, and the inconsistent hardware/software environment monitoring values and hardware/software environment benchmark values are written into the report template to obtain the hardware credibility report and/or software credibility report, and Send it to the corresponding cloud server rental user.

In the embodiment of the application, a monitoring method for a cloud server is provided. It detects the existence of a regular monitoring task, first performs a hardware credible integrity check, and then performs a software credible integrity check after passing, and if all passes, wait again next time. If it fails, a hardware credibility report and/or a software credibility report are generated and sent to the user. Therefore, this application can implement timing monitoring of the cloud server from the two levels of the hardware environment and the software environment, thereby reducing the risk of data leakage and improving the security of the user's data.

Referring to Figure 2-1 and Figure 2-2, the second embodiment of the cloud server monitoring method in the embodiment of the present application includes:

201. Obtain a preset hardware trusted integrity check strategy;

The developer writes the name of the hardware object to be monitored in the hardware trusted integrity check strategy in advance, and stores the hardware trusted integrity check strategy in the device. In this embodiment, the hardware name includes system boot sector, BIOS firmware, hard disk serial number, and so on.

The security chip, also known as the trusted platform module, is a device that can independently perform key generation, encryption and decryption. It has an independent processor and storage unit inside that can store keys and characteristic data. At present, there are two commonly used trusted security chips, one is TPM (Trusted Platform Module) security chip, which refers to a trusted security chip that conforms to TPM specifications, and is mainly manufactured by foreign manufacturers; the other is TCM (Trusted Cryptography Module), Trusted security module) is jointly launched by Great Wall, ZTE and other companies. Due to the encryption measures of the trusted security chip, this solution uses them to store the hardware environment reference value and/or the software environment reference value. This solution does not limit the type of trusted chip used, and this embodiment only uses a TPM chip as an example to describe the solution.

When the TPM chip is inserted into the cloud server that needs to be monitored, the device obtains the hardware credible integrity check strategy preset by the developer.

202. Obtain the attribute value of the corresponding hardware in the current cloud server according to the hardware name specified in the hardware trusted integrity check policy.

According to the hardware name specified in the hardware trusted integrity check policy, the attribute value of the corresponding hardware in the cloud server with the TPM chip is obtained. A brief description is given with the hard disk serial number (Hard Disk Serial Number). The abbreviation of the hard disk serial number is SN. The hard disk manufacturer adds a code for the hard disk to distinguish different hard disk products. The code is unique and immutable. First read the /etc/mtab file, find the device file that is hung, and then use the system to call ioctl to obtain the information in the device file. Then extract the corresponding attribute value from the obtained information, which is the serial number of the hard disk in the current server. The attribute values corresponding to hardware such as boot sector, BIOS firmware, etc. can be obtained in a similar manner. Since this technology is very mature, we will not repeat them one by one.

203. Calculate the attribute value of the hardware according to the first metric algorithm specified in the hardware trusted integrity check strategy to obtain the hardware environment reference value of the hardware, where the hardware environment reference value Stored in the NV space in the blockchain and/or preset trusted security chip;

At present, the measurement algorithm commonly used to measure the hardware information and software information of the server is the hash algorithm. At present, the hash algorithms supported by trusted security chips are SHA256, SM3, etc. Since the standard configuration of the TPM is the SHA256 algorithm, this embodiment uses SHA256 as the first measurement algorithm to measure hardware attribute values.

SHA256 is an algorithm subdivided under SHA-2. SHA256 can convert a string or file of any length into a hash value of 256bit length. SHA256 encryption can be performed in common computer languages such as Python and java. Taking Python as an example, the SHA256 algorithm is already included in the preset hash algorithm library hashlib of Python. First import the hashlib algorithm library, and use x=hashlib.sha256() to extract the SHA256 algorithm and assign the variable x corresponding to the first metric algorithm. Then use the first metric algorithm to calculate the obtained SN number, taking 123 as an example. Finally, the hardware environment reference value corresponding to the SN number is obtained "a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e

998e86f7f7a27ae3".

In order to ensure that the hardware environment reference value is not maliciously tampered with or lost, it is imported into the NV space in the trusted security chip. NV space (Non-Volatile Random Access Memory, non-volatile (or non-playable) random access memory), also abbreviated as NVRAM. NVRAM is not easy to lose. In this embodiment, NVRAM is used to store the hardware environment reference value and the software environment reference value.

TPM can maintain a static chain of trust. The static chain of trust is used for measurement after the platform is powered on. There are multiple PCRs (Platform Configuration Registers) in the trust chain. For example, the first one is used to store the BIOS, the attribute value is A, and the hash value is B; the second one is used to extend the platform configuration and the attribute value It is B. At this time, (A+B) is taken as a whole, and the first measurement algorithm is used to measure it, and the hash value C is obtained. The data stored on the PCR will be stored in the NV space at the same time. Since the data on the TPM will be encrypted, it will be strongly confidential and monitored, thereby increasing the credibility of the hardware environment reference value and the software environment reference value, and improving the accuracy of the environmental integrity check. It should be emphasized that, in order to further ensure the privacy and security of the hardware environment reference value, the hardware environment reference value may also be stored in a node of a blockchain.

204. Obtain the cloud server verification strategy configuration parameters selected by the server leasing user, where the cloud server verification strategy configuration parameters include enabling or disabling the software trusted integrity verification strategy, and enabling or disabling the hardware trusted integrity Verification strategy;

The operating system kernel is the first layer of software on the device and is one of the core components of the entire operating system and device. Because the operating system kernel may be attacked by buffer overflows, direct memory access peripheral attacks, etc., the operating system enters an unexpected state, which causes the entire software environment to be untrustworthy. Therefore, this solution provides a trusted integrity check strategy that can realize the software level.

After the hardware environment benchmark value is written into the preset trusted security chip, the server can be rented on the shelf to provide cloud services. When the server rental user turns on the cloud server, an option box will first pop up so that the user can select the cloud server to verify the policy configuration parameters. The cloud server verification strategy configuration parameters include turning on or off the software trusted integrity verification strategy, and turning on or off the hardware trusted integrity verification strategy.

In addition, in the hardware trusted integrity check strategy, you can also choose whether to perform the hardware trusted integrity check strategy. When some users start to use it, they may pay more attention to the integrity of the hardware environment before use, so as to provide users with more monitoring options.

205. When the software trusted integrity verification strategy is enabled, start the cloud server timing monitoring task according to the cloud server verification strategy configuration parameters;

When the user chooses to enable the software trusted integrity check policy, specific software trusted integrity check policy configuration parameters will pop up, such as the type of the second measurement algorithm used, those files that need to be measured, the monitoring period, and so on. The frequently used software files to be measured are the kernel files of the operating system. For example, in ubuntu, the file name of the kernel file is .config.

206. Obtain the corresponding software file in the current cloud server according to the software name specified in the software trusted integrity verification policy;

Assign the default save path of the ".config" file "/usr/src/linux-headers-VERSION-generic/.config" to String filePath to obtain the software file corresponding to the file name in the software list.

207. Calculate the software file according to the second measurement algorithm specified in the software trusted integrity verification strategy to obtain the software environment reference value, wherein the hardware environment reference value is stored in the blockchain and / Or preset in the NV space in the trusted security chip;

In this embodiment, the second metric algorithm is still the SHA256 algorithm. Use SHA256 to calculate the obtained String filePath to obtain the hash value corresponding to ".config", which is the software environment benchmark value.

It should be emphasized that, in order to further ensure the privacy and security of the above-mentioned software environment reference value, the above-mentioned software environment reference value may also be stored in a node of a blockchain or/and a blockchain.

208. Detect whether there is a cloud server timing monitoring task currently;

209. If there is currently a cloud server timing monitoring task, trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

210. If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, wait to enter the next round of timing monitoring tasks;

211. If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, determine whether the current cloud server meets a preset alarm condition;

212. If the alarm condition is met, generate a hardware credibility report and/or a software credibility report corresponding to the current cloud server and send it to the corresponding cloud server rental user.

The blockchain referred to in this application is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. Blockchain, essentially a decentralized database, is a series of data blocks associated with cryptographic methods. Each data block contains a batch of network transaction information for verification. The validity of the information (anti-counterfeiting) and generation of the next block. The blockchain can include the underlying platform of the blockchain, the platform product service layer, and the application service layer.

In the embodiment of the present application, prior to monitoring, the hardware environment reference value is obtained according to the preset hardware trusted integrity check strategy, so that the user can perform a complete measurement of the hardware environment before starting to use the cloud server. In addition, this embodiment also provides the user to freely choose whether to enable the hardware trusted integrity check strategy or the software trusted integrity check strategy. If it chooses to turn on the software trusted integrity verification strategy, it will configure the parameters according to its selected cloud server verification strategy to obtain the software environment benchmark value and start the monitoring service. Among them, since the software environment reference value and hardware environment reference value in this solution are stored in the trusted security chip and the blockchain, both can be better protected, thereby reducing the risk of tampering and improving the post-verification results Credibility.

Referring to FIG. 3, the third embodiment of the cloud server monitoring method in the embodiment of the present application includes:

301. Detect whether there is a scheduled monitoring task for a cloud server currently;

302. If there is currently a cloud server timing monitoring task, trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

303. If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, wait to enter the next round of timing monitoring tasks;

304. If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, increase the preset number of untrustworthy times by one;

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, it means that there may be environmental changes currently. However, in real applications, there may be the possibility of false alarms. Therefore, to ensure rigor, when users select cloud server verification policy configuration parameters, the threshold of untrustworthy times can be set. Every time it happens, add 1 to the number of untrustworthy times and gradually accumulate.

305. Judge whether the current number of untrustworthy times reaches a preset untrustworthy times threshold;

Each time the number of untrustworthy times is increased, the current untrustworthy times are compared with the preset untrustworthy times threshold, and it is judged whether it reaches the untrustworthy times threshold.

306. If the increased number of untrusted times reaches the preset untrusted times threshold, it is determined that the current cloud server meets the alarm condition;

307. If the current cloud server meets the alarm condition, obtain a preset credible report template;

The developer writes the credible report template into the device in advance. The credible report template includes a title, a string name (in this embodiment, the hardware environment monitoring value and the hardware environment reference value), the writing rules corresponding to each string name, the judgment result, and so on. If the current cloud server meets the alarm conditions, obtain the trusted report template

308. Write the hardware environment monitoring value and the hardware environment reference value, or the software environment monitoring value and the software environment reference value into the report template to obtain a hardware credibility report and/or software credibility report;

Write the inconsistent hardware environment monitoring value and hardware environment reference value, or the software environment monitoring value and software environment reference value into the credible report template according to the writing rules corresponding to each string name, thereby obtaining the hardware credibility report And/or software trust report.

In addition, the credible alarm report also judges each pair of hardware (software) environmental monitoring values and hardware (software) environmental benchmark values. If they are consistent, they are judged to be credible, and those that are inconsistent are judged to be unreliable, so that users can quickly find out. The hardware or software in question.

309. According to a preset email address and a preset phone number, send the hardware credibility report and/or the software credibility report and the preset alarm short message to the server rental user.

Finally, according to the preset email address, the hardware credibility report and/or the software credibility report are sent to the server rental user. At the same time, in order to speed up the processing speed of the server rental users, an alarm message is also sent to the other party.

In this embodiment, the alarm process in the monitoring process is described and supplemented. On the one hand, in order to ensure the rigor of the monitoring results and reduce the occurrence of false alarms, a threshold of untrustworthy times is set. Only when the untrustworthy times reaches the threshold, an alarm will be issued. On the other hand, in order to facilitate server rental users to quickly find untrusted hardware or software, there are inconsistent hardware (software) environmental monitoring values and hardware (software) environmental benchmark values in the trusted report, and after sending the trusted report to the mailbox , And also send a text message to remind you.

Referring to FIG. 4, the fourth embodiment of the cloud server monitoring method in the embodiment of the present application includes:

401. Detect whether there is a cloud server timing monitoring task currently;

402. If a cloud server timing monitoring task currently exists, trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

403. If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, wait to enter the next round of timing monitoring tasks;

404. If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, determine whether the current cloud server meets a preset alarm condition;

405. If the alarm condition is met, generate a hardware credibility report and/or software credibility report corresponding to the current cloud server and send it to the corresponding cloud server rental user;

406. Obtain the updated cloud server verification policy configuration parameters of the server rental user;

As the cloud server is in the process of providing cloud services, it is inevitable that there will be hardware updates, software updates, and patch additions. Therefore, in order to increase or decrease the flexibility of monitoring, this application also provides a solution for updating the cloud server verification strategy.

First, obtain the updated cloud server verification policy configuration parameters of the server leasing user.

407: According to the updated cloud server verification strategy configuration parameters, update the hardware feasible integrity verification strategy and/or the software feasible integrity verification strategy;

Then the updated cloud server verification strategy configuration parameters are updated, the hardware feasible integrity verification strategy and/or the software feasible integrity verification strategy are updated, and the updateable cloud server verification strategy configuration parameters include the measurement algorithm, waiting The name of the software being measured, the monitoring period, etc.

408. Update the hardware environment reference value and/or the software environment reference value according to the updated hardware feasible integrity check strategy and/or software feasible integrity check strategy.

Since the hardware feasible integrity check strategy and/or the software feasible integrity check strategy have changed, the hardware environment reference value and/or the software environment reference value also need to be based on the updated hardware feasible integrity check strategy and /Or a software feasible integrity check strategy to update the hardware environment reference value and/or the software environment reference value in the NV space.

In this embodiment, in order to improve the flexibility of cloud server monitoring, a solution for updating a hardware feasible integrity check strategy and/or a software feasible integrity check strategy is provided. In addition, when the policy is updated, the hardware environment reference value and/or the software environment reference value will also be updated.

The cloud server monitoring method in the embodiment of the present application is described above, and the cloud server monitoring device in the embodiment of the present application is described below. Referring to FIG. 5, the first embodiment of the cloud server monitoring device in the embodiment of the present application includes:

The detection module 501 is used to detect whether there is a cloud server timing monitoring task currently;

The verification module 502 is configured to trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check if there is a cloud server timing monitoring task currently;

Wherein, the verification module 502 includes:

The hardware verification unit 5021 is configured to perform cloud server hardware trusted integrity verification, which specifically includes: generating a hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity verification strategy, and judging the hardware Whether the environment monitoring value is consistent with the preset hardware environment reference value; if the hardware environment monitoring value is consistent with the hardware environment reference value, triggering the execution of the cloud server software trusted integrity check;

The software verification unit 5022 is used to perform cloud server software trusted integrity verification, which specifically includes: generating a software environment monitoring value corresponding to the current cloud server according to a preset software trusted integrity verification strategy, and judging the software Whether the environmental monitoring value is consistent with the preset software environmental reference value;

The standby module 503 is configured to wait for the next round of regular monitoring tasks if the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value ；

The judgment module 504 is configured to judge whether the current cloud server meets preset alarm conditions if the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value;

The alarm module 505 is configured to generate a hardware credibility report and/or a software credibility report corresponding to the current cloud server if the alarm condition is met, and send it to the corresponding cloud server rental user.

Referring to FIG. 6, the second embodiment of the cloud server monitoring device in the embodiment of the present application includes:

Wherein, the verification module 502 includes:

Wherein, the detection module 501 previously includes a hardware measurement module 506, the hardware environment reference value is stored in the NV space in the blockchain and/or a preset trusted security chip, and the hardware measurement module 506 is specifically used for:

Obtain a pre-built hardware trusted integrity check strategy;

Obtaining the attribute value of the corresponding hardware in the current cloud server according to the hardware name specified in the hardware trusted integrity check policy;

The attribute value of the hardware is calculated according to the first metric algorithm specified in the hardware trusted integrity check policy to obtain the hardware environment reference value of the hardware.

Wherein, the hardware measurement module 506 is further connected with a software measurement module 507, the software environment reference value is stored in the NV space in the blockchain and/or a preset trusted security chip, and the software measurement module 507 specifically Used for:

Acquiring cloud server verification strategy configuration parameters selected by the server leasing user, where the cloud server verification strategy configuration parameters include enabling or disabling a software trusted integrity verification strategy;

When the software trusted integrity check strategy is turned on, according to the cloud server check strategy configuration parameters, start the cloud server timing monitoring task;

Obtain the corresponding software file in the current cloud server according to the software name specified in the software trusted integrity verification policy;

The software file is calculated according to the second measurement algorithm specified in the software trusted integrity verification strategy to obtain the software environment reference value.

Optionally, the cloud server verification policy configuration parameter further includes enabling or disabling the hardware trusted integrity verification policy.

Optionally, the judgment module 504 is specifically configured to:

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, add 1 to the preset number of untrustworthy times;

Judge whether the current number of untrustworthiness reaches the preset threshold of untrustworthiness;

If the increased number of untrusted times reaches the preset untrusted times threshold, it is determined that the current cloud server meets the alarm condition.

Optionally, the alarm module 505 is specifically configured to:

If the current cloud server meets the alarm condition, obtain the preset report template;

Writing the hardware environment monitoring value and the hardware environment reference value, or the software environment monitoring value and the software environment reference value into the report template to obtain an alarm report;

According to a preset email address and a preset phone number, the alarm report is sent to the corresponding server rental user and the preset alarm short message is sent to the server rental user.

Wherein, the cloud server monitoring device further includes an update module 508, and the update module 508 is specifically configured to:

Obtaining the updated cloud server verification policy configuration parameters of the server rental user;

According to the updated cloud server verification strategy configuration parameters, update the hardware feasible integrity verification strategy and/or the software feasible integrity verification strategy, and generate corresponding hardware update values and/or software update values;

The hardware update value and/or the software update value are respectively replaced with the corresponding hardware environment reference value and/or the software environment reference value.

On the basis of the previous embodiment, this embodiment also provides the user to freely choose whether to enable the hardware trusted integrity check strategy or the software trusted integrity check strategy. If it chooses to turn on the software trusted integrity verification strategy, it will configure the parameters according to its selected cloud server verification strategy to obtain the software environment benchmark value and start the monitoring service. Among them, since the software environment reference value and hardware environment reference value in this solution are stored in the trusted security chip and the blockchain, both can be better protected, thereby reducing the risk of tampering and improving the post-verification results Credibility. In addition, in order to ensure the rigor of the monitoring results and reduce the occurrence of false alarms, a threshold for the number of unreliable times is set. Only when the number of unreliable times reaches the threshold will an alarm be issued. Finally, in order to improve the flexibility of cloud server monitoring, a solution is provided for updating a feasible hardware integrity check strategy and/or a software feasible integrity check strategy.

Figures 5 and 6 above describe the cloud server monitoring device in the embodiment of the present application in detail from the perspective of modular functional entities, and the following describes the cloud server monitoring device in the embodiment of the present application in detail from the perspective of hardware processing.

FIG. 7 is a schematic structural diagram of a cloud server monitoring device provided by an embodiment of the present application. The cloud server monitoring device 700 may have relatively large differences due to different configurations or performance, and may include one or more processors (central processing units). , A CPU 710 (for example, one or more processors) and a memory 720, and one or more storage media 730 (for example, one or more storage devices) storing application programs 733 or data 732. Among them, the memory 720 and the storage medium 730 may be short-term storage or persistent storage. The program stored in the storage medium 730 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the cloud server monitoring device 700. Furthermore, the processor 710 may be configured to communicate with the storage medium 730, and execute a series of instruction operations in the storage medium 730 on the cloud server monitoring device 700.

The cloud-based server monitoring device 700 may also include one or more power supplies 730, one or more wired or wireless network interfaces 750, one or more input and output interfaces 760, and/or one or more operating systems 731, such as Windows Serve, Mac OS X, Unix, Linux, FreeBSD, etc. Those skilled in the art can understand that the structure of the cloud server monitoring device shown in FIG. 7 does not constitute a limitation on the cloud server monitoring device, and may include more or less components than shown in the figure, or a combination of certain components, or different components. The layout of the components.

This application also provides a computer-readable storage medium. The computer-readable storage medium may be a non-volatile computer-readable storage medium, and the computer-readable storage medium may also be a volatile computer-readable storage medium. The computer-readable storage medium stores instructions, and when the instructions run on a computer, the computer executes the steps of the cloud server monitoring method.

Further, the computer-readable storage medium may mainly include a storage program area and a storage data area, where the storage program area may store an operating system, an application program required by at least one function, etc.; the storage data area may store Data created by the use of nodes, etc.

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the system, device and unit described above can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of the present application essentially or the part that contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , Including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (read-only memory, ROM), random access memory (random access memory, RAM), magnetic disk or optical disk and other media that can store program code .

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions recorded in the embodiments are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

A cloud server monitoring method, wherein the cloud server monitoring method includes:

Detect whether there is a scheduled monitoring task for the cloud server currently;

If there is a cloud server scheduled monitoring task currently, it will trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

Wherein, the cloud server hardware trusted integrity check includes: generating a hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity check strategy, and judging the hardware environment monitoring value and the preset hardware Whether the environmental reference value is consistent; if the hardware environment monitoring value is consistent with the hardware environment reference value, trigger the execution of cloud server software trusted integrity check;

Wherein, the cloud server software trusted integrity check includes: generating a software environment monitoring value corresponding to the current cloud server according to a preset software trusted integrity check strategy, and judging the software environment monitoring value and the preset software Whether the environmental benchmark values are consistent;

If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, then waiting to enter the next round of regular monitoring tasks;

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, determining whether the current cloud server meets the preset alarm condition;

If the alarm conditions are met, a hardware credibility report and/or a software credibility report corresponding to the current cloud server is generated and sent to the corresponding cloud server rental user.
The cloud server monitoring method according to claim 1, wherein the hardware environment reference value is stored in the NV space in the blockchain and/or the preset trusted security chip, and in the detection of whether there is a regular monitoring task currently Before, it also included:

Obtain a pre-built hardware trusted integrity check strategy;

Obtaining the attribute value of the corresponding hardware in the current cloud server according to the hardware name specified in the hardware trusted integrity check policy;

The attribute value of the hardware is calculated according to the first metric algorithm specified in the hardware trusted integrity check policy to obtain the hardware environment reference value of the hardware.
The cloud server monitoring method according to claim 2, wherein the software environment reference value is stored in the NV space in the blockchain and/or a preset trusted security chip, and the hardware is trusted and complete according to the hardware. The first metric algorithm specified in the performance verification strategy calculates the attribute value of the hardware to obtain the hardware environment reference value of the hardware, and further includes:

Acquiring cloud server verification strategy configuration parameters selected by the server leasing user, where the cloud server verification strategy configuration parameters include enabling or disabling a software trusted integrity verification strategy;

When the software trusted integrity check strategy is turned on, according to the cloud server check strategy configuration parameters, start the cloud server timing monitoring task;

Obtain the corresponding software file in the current cloud server according to the software name specified in the software trusted integrity verification policy;

The software file is calculated according to the second measurement algorithm specified in the software trusted integrity verification strategy to obtain the software environment reference value.
The cloud server monitoring method according to claim 3, wherein the cloud server verification strategy configuration parameter further comprises enabling or disabling a hardware trusted integrity verification strategy.
The cloud server monitoring method according to claim 1, wherein, if the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, then it is determined Whether the current cloud server meets the preset alarm conditions includes:

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, add 1 to the preset number of untrustworthy times;

Judge whether the current number of untrustworthiness reaches the preset threshold of untrustworthiness;

If the increased number of untrusted times reaches the preset untrusted times threshold, it is determined that the current cloud server meets the alarm condition.
The cloud server monitoring method according to claim 1, wherein, if the alarm condition is met, generating a hardware credibility report and/or software credibility report corresponding to the current cloud server and sending it to the corresponding cloud server rental user includes :

If the current cloud server meets the alarm conditions, obtain a preset credible report template;

Writing the hardware environment monitoring value and the hardware environment reference value, or the software environment monitoring value and the software environment reference value into the report template to obtain a hardware credibility report and/or a software credibility report;

According to a preset email address and a preset phone number, the hardware credibility report and/or the software credibility report and the preset alarm message are sent to the server rental user.
The cloud server monitoring method according to any one of claims 1-6, wherein the cloud server monitoring method further comprises:

Obtaining the updated cloud server verification policy configuration parameters of the server rental user;

According to the updated cloud server verification strategy configuration parameters, update the hardware feasible integrity verification strategy and/or the software feasible integrity verification strategy;

The hardware environment reference value and/or the software environment reference value are updated according to the updated hardware feasible integrity check strategy and/or software feasible integrity check strategy.
A cloud server monitoring device, wherein the cloud server monitoring device includes a memory, a processor, and a cloud server monitoring program stored on the memory and running on the processor, and the processor executes the The following steps are implemented in the cloud server monitoring program:

Detect whether there is a scheduled monitoring task for the cloud server currently;

If there is a cloud server scheduled monitoring task currently, it will trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

Wherein, the cloud server hardware trusted integrity check includes: generating a hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity check strategy, and judging the hardware environment monitoring value and the preset hardware Whether the environmental reference value is consistent; if the hardware environment monitoring value is consistent with the hardware environment reference value, trigger the execution of cloud server software trusted integrity check;

Wherein, the cloud server software trusted integrity check includes: generating a software environment monitoring value corresponding to the current cloud server according to a preset software trusted integrity check strategy, and judging the software environment monitoring value and the preset software Whether the environmental benchmark values are consistent;

If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, then waiting to enter the next round of regular monitoring tasks;

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, determining whether the current cloud server meets the preset alarm condition;

If the alarm conditions are met, a hardware credibility report and/or a software credibility report corresponding to the current cloud server is generated and sent to the corresponding cloud server rental user.
The cloud server monitoring device according to claim 8, wherein the processor executes the cloud server monitoring program to realize that the hardware environment reference value is stored in the NV space in the blockchain and/or a preset trusted security chip , Before detecting whether there is a regular monitoring task currently, the following steps are further included:

Obtain a pre-built hardware trusted integrity check strategy;

Obtaining the attribute value of the corresponding hardware in the current cloud server according to the hardware name specified in the hardware trusted integrity check policy;

The attribute value of the hardware is calculated according to the first metric algorithm specified in the hardware trusted integrity check policy to obtain the hardware environment reference value of the hardware.
The cloud server monitoring device according to claim 9, wherein the processor executes the cloud server monitoring program to realize that the software environment reference value is stored in the NV space in the blockchain and/or a preset trusted security chip In the above, after calculating the attribute value of the hardware according to the first metric algorithm specified in the hardware trusted integrity check policy to obtain the hardware environment reference value of the hardware, the method further includes the following steps :

Acquiring cloud server verification strategy configuration parameters selected by the server leasing user, where the cloud server verification strategy configuration parameters include enabling or disabling the software trusted integrity verification strategy;

When the software trusted integrity check strategy is turned on, according to the cloud server check strategy configuration parameters, start the cloud server timing monitoring task;

Obtain the corresponding software file in the current cloud server according to the software name specified in the software trusted integrity verification policy;

The software file is calculated according to the second measurement algorithm specified in the software trusted integrity verification strategy to obtain the software environment reference value.
The cloud server monitoring device according to claim 10, wherein when the processor executes the cloud server monitoring program to implement the cloud server verification policy configuration parameter, the cloud server verification policy configuration parameter further comprises enabling or Turn off the hardware trusted integrity check policy.
The cloud server monitoring device according to claim 8, wherein the processor executes the cloud server monitoring program to realize that if the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring If the value is inconsistent with the software environment reference value, when judging whether the current cloud server meets the preset alarm conditions, the following steps are included:

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, add 1 to the preset number of untrustworthy times;

Judge whether the current number of untrustworthiness reaches the preset threshold of untrustworthiness;

If the increased number of untrusted times reaches the preset untrusted times threshold, it is determined that the current cloud server meets the alarm condition.
The cloud server monitoring device according to claim 8, wherein the processor executes the cloud server monitoring program to realize that if the alarm condition is met, a hardware trust report and/or software corresponding to the current cloud server is generated When the trusted report is sent to the corresponding cloud server rental user, the following steps are included:

If the current cloud server meets the alarm condition, obtain a preset credible report template;

Writing the hardware environment monitoring value and the hardware environment reference value, or the software environment monitoring value and the software environment reference value into the report template to obtain a hardware credibility report and/or a software credibility report;

According to a preset email address and a preset phone number, the hardware credibility report and/or the software credibility report and the preset alarm message are sent to the server rental user.
The cloud server monitoring device according to any one of claims 8-13, wherein when the processor executes the cloud server monitoring program, it further comprises the following steps:

Obtaining the updated cloud server verification policy configuration parameters of the server rental user;

According to the updated cloud server verification strategy configuration parameters, update the hardware feasible integrity verification strategy and/or the software feasible integrity verification strategy;

The hardware environment reference value and/or the software environment reference value are updated according to the updated hardware feasible integrity check strategy and/or software feasible integrity check strategy.
A computer-readable storage medium in which computer instructions are stored, and when the computer instructions are executed on a computer, the computer executes the following steps:

Detect whether there is a scheduled monitoring task for the cloud server currently;

If there is a cloud server scheduled monitoring task currently, it will trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check;

Wherein, the cloud server hardware trusted integrity check includes: generating a hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity check strategy, and judging the hardware environment monitoring value and the preset hardware Whether the environmental reference value is consistent; if the hardware environment monitoring value is consistent with the hardware environment reference value, trigger the execution of cloud server software trusted integrity check;

Wherein, the cloud server software trusted integrity check includes: generating a software environment monitoring value corresponding to the current cloud server according to a preset software trusted integrity check strategy, and judging the software environment monitoring value and the preset software Whether the environmental benchmark values are consistent;

If the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value, then waiting to enter the next round of regular monitoring tasks;

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, determining whether the current cloud server meets the preset alarm condition;

If the alarm conditions are met, a hardware credibility report and/or a software credibility report corresponding to the current cloud server is generated and sent to the corresponding cloud server rental user.
The computer-readable storage medium according to claim 15, wherein the computer-readable storage medium executes the computer instructions to realize that the hardware environment reference value is stored in the NV space in the blockchain and/or a preset trusted security chip , Before detecting whether there is a regular monitoring task currently, the following steps are further included:

Obtain a pre-built hardware trusted integrity check strategy;

Obtaining the attribute value of the corresponding hardware in the current cloud server according to the hardware name specified in the hardware trusted integrity check policy;

The attribute value of the hardware is calculated according to the first metric algorithm specified in the hardware trusted integrity check policy to obtain the hardware environment reference value of the hardware.
The computer-readable storage medium according to claim 16, wherein the computer-readable storage medium executes the computer instructions to realize that the software environment reference value is stored in the NV space in the blockchain and/or a preset trusted security chip In the above, after calculating the attribute value of the hardware according to the first metric algorithm specified in the hardware trusted integrity check policy to obtain the hardware environment reference value of the hardware, the method further includes the following steps :

Acquiring cloud server verification strategy configuration parameters selected by the server leasing user, where the cloud server verification strategy configuration parameters include enabling or disabling the software trusted integrity verification strategy;

When the software trusted integrity check strategy is turned on, according to the cloud server check strategy configuration parameters, start the cloud server timing monitoring task;

Obtain the corresponding software file in the current cloud server according to the software name specified in the software trusted integrity verification policy;

The software file is calculated according to the second measurement algorithm specified in the software trusted integrity verification strategy to obtain the software environment reference value.
The computer-readable storage medium according to claim 17, when the computer-readable storage medium executes the computer instructions to implement the cloud server verification policy configuration parameters, the cloud server verification policy configuration parameters further include enabling or Turn off the hardware trusted integrity check policy.
15. The computer-readable storage medium according to claim 15, wherein when the computer-readable storage medium executes the computer instructions to realize the said, if the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment If the monitoring value is inconsistent with the software environment reference value, then judging whether the current cloud server meets the preset alarm conditions, including the following steps:

If the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value, add 1 to the preset number of untrustworthy times;

Judge whether the current number of untrustworthiness reaches the preset threshold of untrustworthiness;

If the increased number of untrusted times reaches the preset untrusted times threshold, it is determined that the current cloud server meets the alarm condition.
A cloud server monitoring device, wherein the cloud server monitoring device includes:

The detection module is used to detect whether there is a scheduled monitoring task of the cloud server currently;

The verification module is used to trigger the execution of the cloud server hardware credible integrity check and/or the cloud server software credible integrity check if there is a cloud server timing monitoring task currently;

Wherein, the verification module includes:

The hardware verification unit is used to perform cloud server hardware trusted integrity verification, which specifically includes: generating the hardware environment monitoring value corresponding to the current cloud server according to a preset hardware trusted integrity verification strategy, and judging the hardware environment Whether the monitoring value is consistent with the preset hardware environment reference value; if the hardware environment monitoring value is consistent with the hardware environment reference value, trigger the execution of the cloud server software trusted integrity check;

The software verification unit is used to perform cloud server software trusted integrity verification, which specifically includes: generating the software environment monitoring value corresponding to the current cloud server according to a preset software trusted integrity verification strategy, and judging the software environment Whether the monitoring value is consistent with the preset software environment reference value;

The standby module is configured to wait to enter the next round of regular monitoring tasks if the hardware environment monitoring value is consistent with the hardware environment reference value, and/or if the software environment monitoring value is consistent with the preset software environment reference value;

A judgment module, configured to judge whether the current cloud server meets preset alarm conditions if the hardware environment monitoring value is inconsistent with the hardware environment reference value, or the software environment monitoring value is inconsistent with the software environment reference value;

The alarm module is configured to generate a hardware credibility report and/or software credibility report corresponding to the current cloud server if the alarm condition is met, and send it to the corresponding cloud server rental user.