Data processing device and data processing method

Abstract

The invention relates to data processing equipment and a data processing method. The data processing equipment comprises a trusted-computing-technology-based trusted execution platform. The platform comprises a data processing virtual machine. The data processing virtual machine is used for processing data transmitted by a client and returns a data processing result to the client, and comprises a decryption sub-module, a computing sub-module, an encryption sub-module and an output control module, wherein the decryption sub-module is used for decrypting encrypted data to be processed from the client and providing the decrypted data for the computing sub-module by a first interface; the computing sub-module is used for processing the decrypted data from the decryption sub-module and providing the data processing result for the encryption sub-module by a second interface; the encryption sub-module is used for encrypting the data processing result from the computing sub-module by the second interface; and the output control module is used for all the output of the data processing virtual machine, so that only the encrypted data output by the encryption sub-module serves as the output of the data processing virtual machine to the client. The data processing equipment can ensure data processing security.

Description

technical field [0001] The present invention relates to a data processing device and a data processing method, and in particular to a data processing device including a trusted execution platform based on trusted computing technology and a data processing virtual machine running on a trusted execution platform based on trusted computing technology. The method of processing. Background technique [0002] The daily management and business operations of enterprises will generate and use a large amount of data. The storage and various processing of these data greatly increase the operating cost of the enterprise. Therefore, there is such a demand: a credible service platform that provides data storage and processing services for enterprises, so that enterprises do not have to spend a lot of cost for the storage and operation processing of massive data. Due to the sensitivity of enterprise data, the first requirement for such a platform that provides proxy storage and proxy pro...

AI Technical Summary

Problems solved by technology

However, the security problem of data processing cannot be solved by encryption, because the content must be known in order to process the data

Although there have been some studies on "Computing on encrypted data", these methods are still immature and the performance is not ideal

In the prior art, data processing security, that is, how to prevent data from being leaked or unauthorized monitoring and modification during data processing, is a problem to be solved

Images