Patent Description:
A marketplace has the meaning of a market, and the concept thereof in the cloud refers to a space for enabling users to conveniently install and use various types of things in a virtual machine (VM) or to trade a solution provided in the form of a VM. As a more comprehensive example, there may be a concept such as Google play store, Apple app store, or the like used in a mobile terminal.

Currently, a few large enterprises that provide cloud services are providing marketplace services. Cloud service customers are capable of purchasing various solutions (i.e., programs) via those marketplace services, and a distribution method for the corresponding solutions is mainly provided in the form of a VM. Marketplaces are being developed to a form in which a cloud service provider (CSP) registers its solution with a marketplace and provides the same, in addition to a general form of registering only a solution of a foreign company or an individual with a marketplace.

As the number of marketplace services that use the cloud is gradually increased, there is a desire for a security technology that enables a cloud service customer to safely use VM images provided from various vendors (i.e., VM service providers). That is, in a process in which a VM service provider registers a VM image with a marketplace or a process in which a cloud service customer downloads a VM image registered with the marketplace and operates a VM instance, there may be a desire for a method of identifying whether the corresponding VM image is forged/falsified. A system and method for secure cloud computing is known from document <CIT> and an authentication method of a virtual machine image using digital certificates is known from <CIT>.

An object of the disclosure is to overcome the above-described drawback and other drawbacks. Another object of the disclosure is to provide a method and apparatus for identifying whether a VM image is forged/falsified at the point in time at which a VM service provider registers the corresponding VM image with a marketplace of a cloud service provider (CSP).

Another object of the disclosure is to provide a method and apparatus for identifying whether a VM image is forged/falsified at the point in time at which a cloud service customer operates the corresponding VM image downloaded from a marketplace of a cloud service provider (CSP). At least one of the objects mentioned above is solved by the subject matter of the independent claims. Preferable embodiments are described in the dependent claims.

According to an aspect of the disclosure, there is provided a marketplace security method implemented by a cloud service provider (CSP), the method including an operation of downloading a virtual machine (VM) image selected by a cloud service customer from the marketplace into a cloud space of the corresponding cloud service customer, an operation of obtaining an electronic signature associated with the downloaded VM image in response to an operation request from the cloud service customer, an operation of verifying the obtained electronic signature, and an operation of determining, based on a verification result, whether to operate a VM instance corresponding to the downloaded VM image.

The marketplace security method further comprises, in response to a download request from the cloud service customer, obtaining an authentication certificate associated with a VM service provider that provides the selected VM image; and by verifying the obtained authenticated certificate, determining whether to download the selected VM image.

Herein, the obtaining comprises obtaining the electronic signature from a storage of the cloud service provider or from a VM service provider that provides the VM image. The determining comprises identifying, by verifying the electronic signature, whether the VM image downloaded from the marketplace is forged/falsified.

The marketplace security method further comprises allocating a trusted platform module (TPM) and verifying whether the VM instance normally operates in a case of operating the VM instance.

The marketplace security method further comprises, when a message for requesting registration of a VM image is received from a virtual machine (VM) service provider, determining whether to register the VM image with the marketplace using at least one of an electronic signature or an authentication certificate.

Herein, the request message comprises at least one of a VM image, an authentication certificate, and an electronic signature.

According to another aspect of the disclosure, there is provided a marketplace security apparatus including one or more processors and a memory, wherein the one or more processors are configured to download a virtual machine (VM) image selected by a cloud service customer from a marketplace to a cloud space of the corresponding cloud service customer, to obtain an electronic signature associated with the downloaded VM image in response to an operation request from the cloud service customer, to verify the obtained electronic signature, and to determine, based on a verification result, whether to operate a VM instance corresponding to the downloaded VM image.

The one or more processors are configured to: obtain an authentication certificate associated with a VM service provider that provides the selected VM image in response to a download request from the cloud service customer; and determine, by verifying the obtained authentication certificate, whether to download the selected VM image.

The one or more processors are configured to obtain the electronic signature from a storage of a cloud service provider or from a VM service provider that provides the VM image.

The one or more processors are configured to identify, by verifying the electronic signature, whether the VM image downloaded from the marketplace is forged/falsified.

The one or more processors are further configured to perform allocating of a trusted platform module (TPM) so as to verify of whether the VM instance normally operates in a case of operating the VM instance.

The one or more processors are further configured to, when a message for requesting registration of a VM image is received from a virtual machine (VM) service provider, determine whether to register the VM image with the marketplace using at least one of an electronic signature or an authentication certificate.

For a better understanding of the disclosure, embodiments and technical features of the disclosure will be described with reference to the following description taken in conjunction with the accompanying drawings, in which:.

Hereinafter, reference will now be made to embodiments, which are illustrated in the accompanying drawings, wherein like reference numerals may refer to like component elements throughout and duplicated description thereof will be omitted. An ending word used for a component element, such as "module" and "unit", is assigned or used for ease of drafting the specifications, and may not have a distinguishing meaning or role. In this instance, the term "unit" used in the disclosure may refer to a software component element or a hardware component element such as a FPGA or an ASIC, and "unit" may perform some functions. However, "unit" is not limited to software or hardware. "unit" may be configured to be contained in an addressable storage medium, or may be configured to reproduce one or more processors. Therefore, for example, "unit" may include component elements such as software component elements, object-oriented software component elements, class component elements, and task component elements, processes, functions, attributes, procedures, sub-routines, segments of a program code, drivers, firmware, microcode, circuit, data, database, data structures, tables, arrays, and variables. A function provided in the component elements and "units" may be implemented by coupling the functions of a smaller number of component elements and "units" or may be implemented by distributing the function to additional component elements and "units".

In addition, when it is determined that detailed descriptions related to a well-known related technical art make the subject matter of the embodiments disclosed in the specification unclear, the detailed descriptions will be omitted herein. In addition, the attached drawings are merely to help understanding of embodiments disclosed in the specification, and it should be understood that the attached drawings do not limit the technical idea disclosed in the specification, but to the contrary, it should be construed that all modifications, equivalents, and alternatives falling within the scope of the embodiments are included.

The disclosure is to provide a method and apparatus for identifying whether a VM image is forged/falsified at the point in time at which a VM service provider registers the corresponding VM image with a marketplace of a cloud service provider (CSP). In addition, the disclosure is to provide a method and apparatus for identifying whether a VM image is forged/falsified at the point in time at which a cloud service customer operates a VM image downloaded from a marketplace of a cloud service provider (CSP). The disclosure is applicable to all service provides capable of providing a marketplace, in addition to a cloud service provider (CSP).

Hereinafter, various embodiments of the disclosure will be described in detail with reference to drawings.

<FIG> is a diagram illustrating the timeline of a marketplace service provided by a cloud service provider (CSP).

As illustrated in <FIG>, a cloud service provider (CSP) may interoperate with a VM service provider and provide a marketplace service to a cloud service customer. To this end, the VM service provider may sequentially perform a process of requesting registration of a vender with a marketplace of the cloud service provider (CSP), and a process of registering its VM image with the marketplace. The cloud service customer may perform a process of selecting and downloading at least one of a plurality of VM images registered with the marketplace of the cloud service provider (CSP), and operating a VM instance.

In case that the VM service provider requests registration of a vendor, the cloud service provider (CSP) may perform a procedure of authenticating the corresponding VM service provider by using an authentication certificate issued from a certificate authority (CA). The detailed description thereof will be provided with reference to <FIG> and <FIG>.

In case that the VM service provider requests registration of a VM image, the cloud service provider (CSP) may perform a procedure of identifying whether the VM image provided from the corresponding VM service provider is forged/falsified by using an authentication certificate and/or an electronic signature. The detailed description thereof will be provided with reference to <FIG> and <FIG>.

In case that the cloud service customer requests operation of a VM instance, the cloud service provider (CSP) may perform a procedure of identifying whether the VM image downloaded from the marketplace is forged/falsified by using an authentication certificate and/or an electronic signature. The detailed description thereof will be provided with reference to <FIG> and <FIG>.

<FIG> is a flowchart illustrating a process of authenticating a VM service provider in the case of registration of a vendor, and <FIG> is a diagram to which reference is made in order to describe the authentication process of <FIG>. A VM service provider (vendor) authentication process according to an embodiment may be performed by a marketplace security apparatus (not illustrated) in the cloud service provider <NUM>. The marketplace security apparatus may operate by interoperating with the VM service provider <NUM>. The marketplace security apparatus may be embodied via a computing device including one or more processors and a memory. Although the vendor authentication process in the flowchart is illustrated as a plurality of operations, at least some operations in the flowchart may be performed in a different order, may be performed with other operations in combination, may be omitted, may be performed in detailed steps, or may be performed with one or more additional steps which are not illustrated.

Referring to <FIG> and <FIG>, a VM service provider <NUM> may request issuing of an authentication certificate from a certificate authority (CA) <NUM> in order to verify its identity in operation S210.

The CA <NUM> may identify the identity of the VM service provider <NUM>, and may issue an authentication certificate to the VM service provider <NUM> in operation S220.

The VM service provider <NUM> may store, in a storage, the authentication certificate issued from the CA <NUM> in operation S230.

The VM service provider <NUM> may transmit, to the cloud service provider <NUM>, a message (i.e., a vendor registration request message) for requesting registration of a vendor with the marketplace of the cloud service provider <NUM> in operation S240. In this instance, the request message may include the authentication certificate.

As another example, the VM service provider <NUM> may transmit the authentication certificate to the cloud service provider <NUM>, independently from the vendor registration request message.

The cloud service provider <NUM> may verify the authentication certificate obtained from the VM service provider <NUM> in operation S250. In this instance, the cloud service provider <NUM> may store, in the storage, the authentication certificate obtained from the VM service provider <NUM>.

In case that a result of the verification shows that the authentication certificate is successfully verified in operation S260, the cloud service provider <NUM> may transmit a message that grants the vendor registration request to the VM service provider <NUM> in operation S270. Subsequently, the cloud service provider <NUM> may register, with the marketplace, the VM service provider <NUM> as a vendor in operation S280.

In case that the result of the verification shows that the verification of the authentication certificate fails in operation S260, the cloud service provider <NUM> may transmit a message that rejects the vendor registration request to the VM service provider <NUM> in operation S290.

As described above, in case that the VM service provider requests registration of a vendor, the cloud service provider (CSP) according to an embodiment of the disclosure may effectively authenticate the corresponding VM service provider by using an authentication certificate received from the corresponding VM service provider.

<FIG> is a flowchart illustrating a process of verifying a VM image obtained from a VM service provider in the case of registration of the VM image, and <FIG> is a diagram to which reference is made in order to describe the verification process of <FIG>. The VM image verification process according to the disclosure may be performed by a marketplace security apparatus in the cloud service provider <NUM>. The marketplace security apparatus may operate by interoperating with the VM service provider <NUM>. The marketplace security apparatus may be embodied via a computing device including one or more processors and a memory. Although the VM image verification process in the flowchart is illustrated as a plurality of operations, at least some operations in the flowchart may be performed in a different order, may be performed with other operations in combination, may be omitted, may be performed in detailed steps, or may be performed with one or more additional steps which are not illustrated.

Referring to <FIG> and <FIG>, the VM service provider <NUM> may generate an electronic signature associated with a VM image to be registered with a marketplace of the cloud service provider <NUM> in operation S310. In this instance, the VM service provider <NUM> may generate an electronic signature by using a private key.

The VM service provider <NUM> may transmit, to the cloud service provider <NUM>, a message (i.e., a VM image registration request message) for requesting registration of a VM image with the marketplace of the cloud service provider <NUM> in operation S320. In this instance, the request message may include at least one of a VM image, an authentication certificate, and an electronic signature.

As another example, the VM service provider <NUM> may transmit at least one of the VM image, the authentication certificate, and the electronic signature to the cloud service provider <NUM>, independently from the VM image registration request message.

The cloud service provider <NUM> may store, in a storage, at least one of the VM image, the authentication certificate, and the electronic signature obtained from the VM service provider <NUM>.

The cloud service provider <NUM> may verify the authentication certificate obtained from the VM service provider <NUM> in operation S330. Here, the authentication certificate may be an authentication certificate obtained from the VM service provider <NUM> in the VM image registration process or the vendor registration process. Depending on an embodiment of the disclosure, the corresponding operation may be configured to be omitted.

The cloud service provider <NUM> may verify the electronic signature obtained from the VM service provider <NUM> in operation S340. In this instance, the cloud service provider <NUM> may verify the electronic signature by using a public key.

In case that a result of the verification shows that both the authentication certificate and the electronic signature are successfully verified in operation S350, the cloud service provider <NUM> may transmit a message that grants the VM image registration request to the VM service provider <NUM> in operation S360.

By verifying the authentication certificate, the cloud service provider <NUM> may identify that the VM service provider <NUM> that provides a VM image is an authenticated vendor. In addition, the cloud service provider <NUM> may identify that a VM image provided by the VM service provider <NUM> is an original image by verifying the electronic signature.

In case that the verification is successfully performed, the cloud service provider <NUM> may register, with the marketplace <NUM>, the VM image obtained from the VM service provider <NUM> in operation S370.

In case that the result of the verification shows that verification of at least one of the authentication certificate and the electronic signature fails in operation S350, the cloud service provider <NUM> may transmit a message that rejects the VM image registration request to the VM service provider <NUM> in operation S380.

As described above, the cloud service provider (CSP) according to an embodiment of the disclosure may identify whether the VM service provider that provides a VM image is an authenticated vendor by verifying an authenticated certificate obtained from the VM service provider in case that registration of a VM image is requested, and may identify whether the VM image provided from the VM service provider is forged/falsified by verifying an electronic signature obtained from the VM service provider.

<FIG> is a flowchart illustrating a process of verifying a VM image downloaded from a marketplace in the case of operation of a VM instance, and <FIG> is a diagram to which reference is made in order to describe the verification process of <FIG>. The VM image verification process according to the embodiment may be performed by a marketplace security apparatus in the cloud service provider <NUM>. The marketplace security apparatus may operate by interoperating with a client terminal <NUM>. The marketplace security apparatus may be embodied via a computing device including one or more processors and a memory. Although the VM image verification process in the flowchart is illustrated as a plurality of operations, at least some operations in the flowchart may be performed in a different order, may be performed with other operations in combination, may be omitted, may be performed in detailed steps, or may be performed with one or more additional steps which are not illustrated.

Referring to <FIG> and <FIG>, the client terminal <NUM> may access a marketplace of the cloud service provider <NUM> in response to an access command from a cloud service customer in operation S405. The cloud service customer may access the marketplace so as to identify a plurality of VM images registered with the corresponding marketplace, and may purchase a desired VM image.

In response to a select command from the cloud service customer, the client terminal <NUM> may select at least one of the plurality of VM images registered with the marketplace in operation S410.

In response to a request command from the cloud service customer, the client terminal <NUM> may transmit a message that requests downloading of the selected VM image (i.e., a download request message) to the cloud service provider <NUM> in operation S415.

In response to the download request message, the cloud service provider <NUM> may identify the VM service provider <NUM> that provides the VM image to be downloaded, and may detect an authentication certificate obtained from the identified VM service provider <NUM>. Here, the authentication certificate may be an authentication certificate obtained from the VM service provider <NUM> in the vendor registration process or the VM image registration process, and may be stored in a storage of the cloud service provider <NUM>.

In case that the corresponding authentication certificate is not present in the storage of the cloud service provider <NUM>, the cloud service provider <NUM> may request the authentication certificate from the VM service provider <NUM>.

The cloud service provider <NUM> may verify the authentication certificate obtained from the VM service provider <NUM> in operation S420.

In case that a result of the verification in operation <NUM> shows that the authentication certificate is successfully verified in operation S425, the cloud service provider <NUM> may transmit a message that grants the VM image download request to the client terminal <NUM> in operations S430.

By verifying the authentication certificate, the cloud service provider <NUM> may identify that the VM service provider <NUM> that provides a VM image is an authenticated vendor.

In case that the authentication certificate is successfully verified, the cloud service provider <NUM> may download the VM image selected by the cloud service customer to a cloud space <NUM> of the corresponding customer in operation S435.

In case that the result of the verification in operation <NUM> shows that verification of the authentication certificate fails in operation S425, the cloud service provider <NUM> may transmit a message that rejects the VM image download request to the VM service provider <NUM> in operation S440.

Depending on an embodiment of the disclosure, the authentication verification may be configured to be omitted. In this instance, the cloud service provider <NUM> may download the corresponding VM image from the marketplace <NUM> without a separate verification process.

In response to a request command from the cloud service customer, the client terminal <NUM> may transmit a message (i.e., an operation request message) that requests operation of a VM instance corresponding to the VM image downloaded from the marketplace <NUM> in operation S445.

In response to the operation request message, the cloud service provider <NUM> may identify the VM service provider <NUM> that provides the VM image to be operated, and may detect an electronic signature obtained from the identified VM service provider <NUM>. Here, the electronic signature may be an electronic signature obtained from the VM service provider <NUM> in the VM image registration process, and may be stored in a storage of the cloud service provider <NUM>.

In case that the electronic signature of the corresponding VM image is not present in the storage of the cloud service provider <NUM>, the cloud service provider <NUM> may request the corresponding electronic signature from the VM service provider <NUM>.

The cloud service provider <NUM> may verify the electronic signature obtained from the VM service provider <NUM> in operation S450. In this instance, the cloud service provider <NUM> may verify the electronic signature by using a public key.

In case that a result of the verification in operation <NUM> shows that the electronic signature is successfully verified in operation S455, the cloud service provider <NUM> may transmit a message that grants the VM instance operation request to the client terminal <NUM> in operations S460.

The cloud service provider <NUM> may identify that the VM image downloaded from the marketplace <NUM> is an original image by verifying the electronic signature.

In case that the electronic signature is successfully verified, the cloud service provider <NUM> may operate, in the cloud space <NUM> of the customer, the VM instance corresponding to the VM image downloaded from the marketplace <NUM> in operation S465.

In the case of operation of the VM instance, the cloud service provider <NUM> may allocate a trusted platform module (TPM) so as to verify whether the VM instance normally operates. Depending on an embodiment of the disclosure, the corresponding operation may be configured to be omitted.

In case that the result of the verification in operation <NUM> shows that the verification of the electronic signature fails in operation S455, the cloud service provider <NUM> may transmit a message that rejects the VM instance operation request to the client terminal <NUM> in operations S470.

As described above, in case that operation of a VM instance is requested, the cloud service provider (CSP) according to an embodiment of the disclosure may identify whether a VM service provider that provides a VM image is an authenticated vendor by verifying an authenticated certificate obtained from the VM service provider, and may identify whether the VM image downloaded from the marketplace is forged/falsified by verifying an electronic signature obtained from the VM service provider.

<FIG> is a block diagram illustrating the configuration of a computing device according to an embodiment of the disclosure.

Referring to <FIG>, a computing device <NUM> according to an embodiment of the disclosure may include at least one processor <NUM>, a computer-readable storage medium <NUM>, and a communication bus <NUM>. The computing device <NUM> may be one or more components included in the above-described marketplace security apparatus or included in elements configured with the marketplace security apparatus.

The processor <NUM> may enable the computing device <NUM> to operate according to the above-described embodiment. For example, the processor <NUM> may implement one or more programs <NUM> stored in the computer-readable storage medium <NUM>. The one or more programs may include one or more computer-executable instructions, and the computer-executable instructions may be configured to enable the computing device <NUM> to perform operations according to embodiments when the computer-executable instructions are executed by the processor <NUM>.

The computer-readable storage medium <NUM> may be configured to store a computer-executable instruction or program code, program data, and/or other appropriate types of information. The program <NUM> stored in the computer-readable storage medium <NUM> may include a set of instructions executable by the processor <NUM>. According to an embodiment, the computer-readable storage medium <NUM> may be memory (volatile memory such as random access memory, non-volatile memory, or an appropriate combination thereof), one or more magnetic disk storage devices, optical disk storage devices, flash memory devices, and other types of storage media capable of storing information desired or accessed by the computing device <NUM>, or an appropriate combination thereof.

The communication bus <NUM> may include the processor <NUM> and the computer-readable storage medium <NUM>, and may mutually connect various other components of the computing device <NUM>.

The computing device <NUM> may include one or more input/output interfaces <NUM> that provide interfaces for one or more input/output devices <NUM>, and one or more network communication interfaces <NUM>. The input/output interface <NUM> and the network communication interface <NUM> may be connected to the communication bus <NUM>.

The input/output device <NUM> may be connected to other components of the computing device <NUM> via the input/output interface <NUM>. The illustrated input/output device <NUM> may include a pointing device (a mouse, a trackpad, or the like), a keyboard, a touch input device (a touch pad, a touch screen, or the like), a voice or sound input device, various types of sensor devices, and/or an input device such as a photographing device, and/or an output device such as a display device, a printer, a speaker, and/or a network card. The illustrated input/output device <NUM> may be included in the computing device <NUM> as one of the components included in the computing device <NUM>, or may be connected to the computing device <NUM> as a separate device from the computing device <NUM>.

As described above, the effect of the marketplace security method and the apparatus therefor according to embodiments of the disclosure are as follow.

According to at least one of the embodiments of the disclosure, the method and apparatus may identify whether a VM service provider that provides a VM image is an authenticated vendor by verifying an authenticated certificate obtained from the VM service provider in case that registration of a VM image is requested, and may identify whether the VM image provided from the VM service provider is forged/falsified by verifying an electronic signature obtained from the VM service provider, which are advantageous.

In addition, according to at least one of the embodiments of the disclosure, the method and apparatus may identify whether a VM service provider that provides a VM image is an authenticated vendor by verifying an authenticated certificate obtained from the VM service provider in case that a cloud service customer requests operation of a VM instance, and may identify whether the VM image downloaded from the marketplace is forged/falsified by verifying an electronic signature obtained from the VM service provider, which are advantageous.

Effects that could be obtained by the marketplace security method and the apparatus therefor according to the embodiments of the disclosure are not limited to the above-described effects, and based on the descriptions provided below, those skilled in the art could clearly understand other effects which are not mentioned.

Claim 1:
A marketplace security method implemented by a cloud service provider (<NUM>), the method comprising:
registering (S280) a virtual machine, VM, service provider (<NUM>) with a marketplace (<NUM>) of the cloud service provider as a vendor;
registering (S370) a VM image provided by the VM service provider (<NUM>) with the marketplace (<NUM>);
downloading (S435) the VM image selected by a cloud service customer from the marketplace (<NUM>) into a cloud space (<NUM>) of the cloud service customer;
obtaining an electronic signature associated with the downloaded VM image in response to an operation request (S445) of the cloud service customer;
verifying (S450) the obtained electronic signature; and
in case the electronic signature is successfully verified, operating (<NUM>) a VM instance corresponding to the downloaded VM image in the cloud space (<NUM>) of the cloud service customer, wherein the downloading (S435) comprises:
in response to a download request from the cloud service customer, identifying the VM service provider (<NUM>) that provides the VM image selected by the cloud service customer;
detecting an authentication certificate issued from a certificate authority (<NUM>) and obtained from the identified VM service provider (<NUM>) in the vendor registration process or the registration process of the VM image;
verifying the detected authentication certificate; and
in case the authentication certificate is successfully verified (S425), downloading the selected VM image from the marketplace (<NUM>).