Credible data transmission method

Abstract

The invention discloses a credible data transmission method, which comprises the following steps: authenticating, by the SGX (Singapore Exchange Limited), a client and a server which are in data transmission; verifying, by a client authentication module, legalities of a platform where the client is positioned and a user to the corresponding server; after the client is authenticated, establishing asession between the client and the server to enable the client and the server to perform a one-off supply protocol, and sealing confidential data of a client application onto a platform where the application is positioned, wherein an independent secure channel for communication connection is established between the server and the client, and each channel corresponds to a unique client, and the server encrypts data sent by the client in a transmission process; and after a protected file is encrypted in an enclave, sending a specific file to the client according to a file request of the client,and then distributing the file to an authenticated and authorized application user to check or perform other operations. Based on credible hardware, the method effectively solves a security bug.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a new trusted data transmission method, which is based on trusted hardware and involves the transmission of confidential information in smart grids. Background technique [0002] Since the birth of computer technology, the types and numbers of applications running on computers have increased day by day. Today's computer systems need to process more and more important, sensitive and valuable information. This information must be protected from tampering and theft. Unfortunately, an entire industry today is more or less dedicated to information theft [1], such as stealing banking data or corporate intellectual property from systems. There are many applications on computer platforms that must be kept confidential, such as financial items, online banking, and medical record applications. Secret holders or software may not trust each other, so the secrets of each sof...

AI Technical Summary

Problems solved by technology

Existing attempts to use encryption and access control mechanisms to protect corporate data are vulnerable to some attacks

For example, malware could steal file content and even keys used for encryption at the same time, by reading app memory while the app is running, copying display content from video framebuffers, or violating usage policies (such as an attacker Extend the use of expired files by modifying the system time of the machine where the client is located)

In addition, assuming that the above threats have been resolved, more advanced attacks can still crack the application

Images