Journal of Systems Engineering and Electronics ›› 2010, Vol. 21 ›› Issue (1): 168-174.doi: 10.3969/j.issn.1004-4132.2010.01.027

• COMPUTER DEVELOPMENT AND PRACTICE • Previous Articles    

Quorum systems for intrusion-tolerance based on trusted timely computing base

Hua Zhou∗, Xiangru Meng, Li Zhang, and Xiangdong Qiao   

  1. The Telecommunication Engineering Institute, Air Force Engineering University, Xi’an 710077, P. R. China
  • Online:2010-02-26 Published:2010-01-03
  • Supported by:

    This work was supported by the National Natural Science Foundation of China (60774091).

Abstract:

Quorum systems have been used to solve the problem of data consistency in distributed fault-tolerance systems. But when intrusions occur, traditional quorum systems have some disadvantages. For example, synchronous quorum systems are subject to DOS attacks, while asynchronous quorum systems need a larger system size (at least 3f+1 for generic data, and f fewer for self-verifying data). In order to solve the problems above, an intrusion-tolerance quorum system (ITQS) of hybrid time model based on trust timely computing base is presented (TTCB). The TTCB is a trust secure real-time component inside the server with a well defined interface and separated from the operation system. It is in the synchronous communication environment while the application layer in the server deals with read-write requests and executes update-copy protocols asynchronously. The architectural hybridization of synchrony and asynchrony can achieve the data consistency and availability correctly. We also build two kinds of
ITQSes based on TTCB, i.e., the symmetrical and the asymmetrical TTCB quorum systems. In the performance evaluations, we show that TTCB quorum systems are of smaller size, lower load and higher availability.