Abstract: Currently, the master key of the Hadoop Key Management Service (KMS) based on the software is stored in the system in plain text in the form of a configuration file, which poses a serious security risk. The Intel SGX-based Hadoop KMS master key protection scheme sets the master key to the KMS by establishing a secure communication channel by SGX remote authentication, then stores the master key in the KMS server locally, and transfers the master key usage process to the SGX security zone to ensure the use of the master key is protected by the SGX hardware. Through testing and security assessment, the proposed solution solves the problem of trusted deployment and use of KMS master key. The performance loss caused by security enhancement in key creation test is 10.08%.

Key words: Hadoop key management service, Intel SGX, key deployment, trusted computing, security

摘要： 目前基于软件实现的Hadoop密钥管理服务(key management service, KMS)主密钥以配置文件的方式明文存储在系统中，存在严重的安全隐患.基于Intel SGX的Hadoop KMS主密钥保护方案通过SGX远程认证建立安全通信信道的方式向KMS设置主密钥，然后将主密钥密封存储在KMS服务器本地，并将主密钥的使用过程转移到SGX安全区中，来保证主密钥的使用过程受SGX硬件保护.通过测试和安全性评估，提出的方案解决了KMS主密钥的可信部署与使用问题，在密钥创建的测试中得到安全增强带来的性能损耗为10.08%.

关键词: Hadoop KMS, Intel SGX, 密钥部署, 可信计算, 安全