Data processing method, device and system

Abstract

The embodiment of the invention discloses a data processing method, device and system. The system comprises a key generation server, a terminal device and a data providing server, and a TEE and a security module are arranged in the terminal device. The data providing server encrypts the data based on a public key, and the public key is pre-generated by a key generation server. The TEE receives the data encrypted based on the public key and initiates secure multi-party calculation. The TEE and security module performs secure multi-party calculation by using a first private key component stored in the TEE and a second private key component stored in the security module in a joint manner to obtain a private key, and the first private key component and the second private key component are obtained by splitting the TEE after the TEE receives the private key sent by the key generation server. The TEE decrypts the encrypted data by using a private key obtained by secure multi-party calculation. By means of the embodiments of the present specification, the security of TEE hardware data processing can be enhanced.

Description

technical field [0001] The present invention relates to the technical field of computer data processing, in particular to a data processing method, device and system for enhancing the security of a trusted execution environment. Background technique [0002] The trusted execution environment (Trusted Execution Environment, TEE) hardware security environment technology in the CPU of the terminal device has been more and more applied to the production environment. At present, due to the inherent defects in CPU architecture design, security processing such as blockchain, AI, and big data processing all rely on the Trusted Execution Environment (TEE) that comes with the CPU, but TEE technology only uses a single built-in private Once the key is stolen, the data will face the risk of total theft. For example, exploiting security vulnerabilities such as Spectre / Meltdown / Foreshadow in the CPU can steal data, and even steal the root key (PRIVATE KEY) of the TEE, leading to the risk...

AI Technical Summary

Problems solved by technology

At present, due to the inherent defects in CPU architecture design, security processing such as blockchain, AI, and big data processing all rely on the Trusted Execution Environment (TEE) that comes with the CPU, but TEE technology only uses a single built-in private key, once the key is stolen, the data will face the risk of total theft

For example, exploiting security vulnerabilities such as Spectre / Meltdown / Foreshadow in the CPU can steal data, and even steal the root key (PRIVATE KEY) of the TEE, leading to the risk of comprehensive data leakage, and it is currently impossible to solve the above problems through simple software patches

Images