Privacy processing method and platform based on trusted computing sandbox

Abstract

The present invention discloses a privacy processing method and platform based on a trusted computing sandbox, and belongs to the technical field of multi-party shared data processing. The privacy processing method based on a trusted computing sandbox of the present invention creates a confidential container in a trusted computing sandbox according to a computing task request issued by a data sharing party; the confidential container generates a pair of container public and private keys, and transmits the container public key to a blockchain; the trusted computing sandbox verifies the signature through the user's public key, and uses the container private key to decrypt the data and computing model, performs distributed data computing, obtains the distributed computing result, and then obtains the result of this computing request task; after the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container synchronously clears the privacy data and computing model of this task, realizing privacy processing in the process of multi-party data sharing, and the scheme is scientific, reasonable, detailed, practical, and conducive to promotion and use.

Description

Technical Field

[0001] The present invention relates to a privacy processing method and platform based on a trusted computing sandbox, and belongs to the technical field of multi-party shared data processing. Background Art

[0002] The Chinese patent (publication number CN114861167A) discloses a distributed energy data management collaborative processing method and system based on blockchain, which belongs to the field of distributed energy data processing technology. The distributed energy data management collaborative processing method based on blockchain collects data from distributed energy system terminals by building a distributed collection model to ensure the credibility of data collection; builds a trusted computing distributed sandbox to provide an isolated environment for data to ensure the credibility of the operating environment; builds a distributed data verification model to perform trustworthy verification on isolated data to ensure that off-chain data is not tampered with or destroyed; builds a distributed data twin model to perform twin aggregation on data to meet detailed optimization decision-making tasks; according to the optimization decision-making tasks, builds a distributed optimization decision-making contract model to split the optimization decision-making tasks into micro-task services to complete the collaborative processing of distributed energy data resources. The solution is detailed and feasible.

[0003] The above scheme provides an isolated environment for data by building a trusted computing distributed sandbox to ensure the trustworthiness of the operating environment. However, the above scheme does not disclose how the trusted computing distributed sandbox processes multi-party shared data and how to protect the privacy of multi-party data sharing, which affects the effective implementation of the data isolation processing scheme, and thus cannot complete the privacy processing in the process of multi-party data sharing, which is not conducive to promotion and use. Summary of the invention

[0004] In view of the defects of the prior art, the first object of the present invention is to provide a method for creating a confidential container in a trusted computing sandbox according to a computing task request issued by a data sharing party; the confidential container generates a pair of container public and private keys, and transmits the container public key to the blockchain; the blockchain synchronizes the user public key to the confidential container, and synchronizes the container public key to the data sharing party; the blockchain sends the data and the computing model to the trusted computing sandbox through a shadow page table mapping model; the trusted computing sandbox verifies the signature through the user public key, and decrypts the data and the computing model with the container private key, performs distributed data computing, obtains the distributed computing result, and then obtains the result of this computing request task; after the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container synchronously clears the privacy data and computing model of this task, so as to realize the privacy processing of the multi-party data sharing process. The scheme is scientific, reasonable, detailed, and feasible, which is conducive to the promotion and use of the privacy processing method based on the trusted computing sandbox.

[0005] The second objective of the present invention is to provide a method for creating a confidential container in a trusted computing sandbox by setting an isolated memory module, a trusted chip, and a trusted computing sandbox module, and being able to perform real-time measurement of component status and computing tasks, thereby ensuring that the hardware is always trusted and has not been tampered with, and that there is no deviation in the computing tasks during the execution of computing tasks by the trusted computing sandbox module. At the same time, a measurement report is generated as a basis for evidence storage and supervision, thereby realizing privacy processing in the process of multi-party data sharing. The solution is scientific, reasonable, detailed, and feasible, and is conducive to the promotion and use of a privacy protection platform based on a trusted computing sandbox.

[0006] The third objective of the present invention is to provide a privacy processing method and platform based on a trusted computing sandbox that can protect the privacy of data shared by multiple parties, and integrate the application of privacy computing and blockchain technology, with wide algorithm applicability and high performance; and schedule the trusted computing sandbox through the blockchain, utilize shared data, execute the computing requests of the data sharing parties, and realize privacy protection at the same time.

[0007] To achieve one of the above purposes, the first technical solution of the present invention is:

[0008] Privacy processing method based on trusted computing sandbox,

[0009] The trusted computing sandbox is scheduled through blockchain, and the shared data is used to execute the computing task requests of the data sharing party, while achieving privacy protection; it includes the following:

[0010] One or more data sharing parties issue computing task requests, and the blockchain creates a confidential container in the trusted computing sandbox based on the computing task requests;

[0011] The data sharing party generates a public and private key pair for the user. The user's private key is held by the user, and the user's public key is transmitted to the blockchain.

[0012] The confidential container generates a pair of container public and private keys, and transmits the container public key to the blockchain;

[0013] The blockchain synchronizes the user's public key to the confidential container and synchronizes the container's public key to the data sharing party;

[0014] The data sharing party encrypts the data and computing model required for the task through the container public key, signs with the user's private key, and sends them to the blockchain;

[0015] The blockchain sends data and computing models to the trusted computing sandbox through the shadow page table mapping model;

[0016] The trusted computing sandbox verifies the signature through the user's public key, decrypts the data and computing model with the container's private key, performs distributed data computing, and obtains distributed computing results. The data is sealed during the computing process.

[0017] The distributed computing results are encrypted with the user's public key, signed with the container's private key, and sent to the blockchain;

[0018] The blockchain sends the distributed computing results to the corresponding data sharing parties;

[0019] The data sharing party verifies the signature with the container public key and decrypts it with the user's private key to obtain the result of this computing request task;

[0020] After the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container simultaneously clears the privacy data and calculation model of this task to achieve privacy processing in the process of multi-party data sharing.

[0021] After continuous exploration and experimentation, the present invention creates a confidential container in a trusted computing sandbox according to a computing task request issued by a data sharing party; the confidential container generates a pair of container public and private keys, and transmits the container public key to the blockchain; the blockchain synchronizes the user public key to the confidential container, and synchronizes the container public key to the data sharing party; the blockchain sends the data and the computing model to the trusted computing sandbox through a shadow page table mapping model; the trusted computing sandbox verifies the signature through the user public key, and decrypts the data and the computing model with the container private key, performs distributed data computing, obtains the distributed computing result, and then obtains the result of this computing request task; after the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container synchronously clears the privacy data and computing model of this task, so as to realize the privacy processing of the multi-party data sharing process. The scheme is scientific, reasonable, detailed, feasible, and conducive to popularization and use.

[0022] Furthermore, the present invention can protect the privacy of the data sharing process by multiple parties, and realize a privacy computing solution with wide algorithm applicability and high performance through the integrated application of privacy computing and blockchain technology. At the same time, the present invention schedules the trusted computing sandbox through blockchain, uses shared data, executes the computing requests of the data sharing parties, and realizes privacy protection at the same time.

[0023] Furthermore, the blockchain of the present invention will authenticate the identity of the communication party before each communication request, and can only provide corresponding services after the verification; at the same time, the components and computing tasks of the trusted computing sandbox are measured in real time to ensure that the components are not tampered with and the execution direction of the computing tasks is not biased; the identity authentication and trust verification processes are all stored in a trustworthy manner on the blockchain. In addition, each interaction between the data sharing party and the trusted computing sandbox will also be recorded on the blockchain as a basis for consensus auditing and behavior tracing.

[0024] As the preferred technical measures:

[0025] The trusted computing sandbox includes a memory isolation unit, a memory encryption unit and a data sealing unit, so that the isolated memory module cannot be accessed by unauthorized entities, and the processor's calculations are sealed in the isolated memory module, thereby achieving privacy protection at the hardware and memory levels.

[0026] As the preferred technical measures:

[0027] The trusted computing sandbox also includes a trusted measurement unit and a static and dynamic measurement unit;

[0028] The trusted measurement unit uses the trusted chip to perform trusted measurement on the measurement object, and by comparing it with the measurement reference value, it determines that the measurement object is complete and has not been tampered with, thereby confirming its security and trustworthiness;

[0029] The measurement objects include memory components or / and BIOS components or / and kernel components or / and data structures or / and key processes and codes or / and important table jump calculation tasks;

[0030] The static and dynamic measurement unit is used to perform static and dynamic measurements on the running process of the trusted computing sandbox, providing real-time integrity verification and security protection capabilities.

[0031] As the preferred technical measures:

[0032] The calculation method of distributed data is as follows:

[0033] The computing power requirements and / or computing locations and / or business processes and / or privacy requirements and / or redundant state information requested by computing tasks are used as dimensions for distributed model orchestration, which is used for cluster deployment in trusted computing sandboxes and accepts distributed scheduling from the blockchain.

[0034] As the preferred technical measures:

[0035] The confidential container compiles the algorithm to the instruction set through a virtualized compilation environment, thereby driving the hardware to implement privacy computing tasks. Its life cycle is synchronized with the privacy data. After the confidential container is created, the privacy data is imported into the isolated memory module bound to the container; when the container is destroyed, the privacy data is cleared by the isolated memory module, thus achieving synchronous management of the life cycle of the sandbox confidential container and the privacy data.

[0036] The container address of the confidential container is obfuscated on the chain and displayed as a virtual address, so that when the data sharing party or network attacker attempts to access the trusted computing sandbox address, they can only obtain the virtual address;

[0037] The mapping between the virtual address and the real address of the sandbox uses the shadow page table mapping model, which adds a layer of pseudo-physical address between the virtual address and the real address, and maintains the mapping between the virtual address and the real address through the shadow page table mapping model;

[0038] The shadow page table mapping model converts the client virtual address to the host physical address, thereby ensuring that the isolated memory module corresponds to the confidential container one by one.

[0039] As the preferred technical measures:

[0040] The communication between the data sharing party and the blockchain, and the communication between the blockchain and the trusted computing sandbox, adopts a single-packet authentication model to authenticate the communication object. The single-packet authentication model generates a single data packet based on the built-in algorithm, which is encrypted and uploaded to the blockchain for identity authentication. Only after passing the authentication can a connection be established and services can be provided for it.

[0041] Except for successful authentication, the blockchain discards the data packets in other cases and does not send response information, making it impossible for unauthenticated requesters to confirm whether the blockchain exists.

[0042] As the preferred technical measures:

[0043] The task scheduling of the trusted computing sandbox and the on-chain obfuscation of the sandbox address both use the blockchain’s smart contract model to achieve unified scheduling management;

[0044] When the data sharing party has computing task requirements, the blockchain verifies the identity of the data sharing party through a single-package authentication model, and the smart contract sends an instruction to the sandbox to create a confidential container;

[0045] Similarly, through the single-package authentication model, after verifying the identity of the trusted computing sandbox, the encrypted computing model and data are sent to the trusted computing sandbox; the address of the trusted computing sandbox is obfuscated on the chain, and neither the data sharing parties nor the attacker can directly access the real address of the sandbox;

[0046] After the computing task is completed, the smart contract model controls the automatic destruction of the container and clears the private data synchronously.

[0047] As the preferred technical measures:

[0048] The trusted measurement unit is a trusted supervision method based on the blockchain state channel, which is divided into trusted authentication based on the state channel contract, automatic verification of the trusted computing sandbox based on the state channel, and behavior evidence storage, which specifically includes the following steps:

[0049] Step 21, using the consensus mechanism and state channel characteristics of the blockchain, build a log service chain, an authorization service chain, and a remote proof chain through the state channel contract, and provide trusted evidence, identity authentication, and automatic verification services in accordance with the identity verification and dynamic measurement requirements of the state channel contract;

[0050] Step 22: Use the authorization service chain and remote proof chain in step 21 to provide trusted authentication and identity authentication services for the data sharing party and the trusted computing sandbox. Before going online, dynamic measurement is required to confirm that the communication object is trustworthy and has not been tampered with. The blockchain remotely proves the identity of the data sharing party to be on the chain, and uses the consensus algorithm for efficient authentication, and finally authorizes and registers the identity and accesses the service;

[0051] Step 23, the log service chain performs reliable evidence storage for the authentication and authorization process in step 22;

[0052] Step 24, after the trusted evidence in step 23 is completed, the original data of each supervisory factor is converted into a real number matrix and a feature vector using sandbox startup, container service, kernel module, algorithm program, dynamic library, and data as supervisory factors, and combined into a trusted chain measurement model, so that the machine learning algorithm of the state channel can be applied to automatic measurement;

[0053] Step 25, loading the trusted chain measurement model in step 24 into the blockchain state channel, and automatically comparing the trusted verification values ​​of the sandbox startup, algorithm program, and kernel module specified supervision factors to perform automated verification measurement and supervision decision-making of the state channel;

[0054] Step 26, using the result of the automatic verification of the state channel in step 25 as the basis for the trusted measurement authorization in the trusted computing sandbox scheduling management, and matching the corresponding access control mechanism through the authorization service chain, thereby forming the ability to use the state channel for automatic verification, process supervision, and analytical decision-making;

[0055] Access control mechanisms include allowing or blocking or auditing;

[0056] The log service chain is used to provide reliable evidence of the verification results; the results of the reliable evidence support the blockchain to conduct consensus audits and behavior tracing, thereby achieving reliable supervision.

[0057] To achieve one of the above purposes, the second technical solution of the present invention is:

[0058] The privacy processing method based on the trusted computing sandbox includes the following steps:

[0059] Step 1: One or more data sharing parties issue a computing task request, and create a confidential container in a pre-built trusted computing sandbox according to the computing task request; the container address of the confidential container is obfuscated on the chain and displayed as a virtual address;

[0060] Step 2: The data sharing party in step 1 generates a public-private key pair for the user. The user's private key is held by the user, and the user's public key is transmitted to the blockchain. The confidential container in step 1 generates a pair of public-private keys for the container, and transmits the container public key to the blockchain.

[0061] Step 3: The blockchain in step 2 synchronizes the user public key to the confidential container and synchronizes the container public key to the data sharing party;

[0062] Step 4: The data sharing party in step 3 encrypts the data and computing model required for the task through the container public key, signs with the user private key, and sends them to the blockchain;

[0063] Step 5: The blockchain in step 4 sends the data and computing model to the trusted computing sandbox through the pre-built shadow page table mapping model;

[0064] Step 6: The trusted computing sandbox in step 5 verifies the signature through the user's public key, decrypts the data with the container's private key, and performs distributed data computing to obtain the distributed computing results.

[0065] Step 7: Encrypt the distributed computing result in step 6 with the user’s public key, sign with the container’s private key, and send it to the blockchain;

[0066] Step 8, the blockchain in step 7 sends the distributed computing results to the corresponding data sharing party;

[0067] Step 9: The data sharing party in step 8 verifies the signature with the container public key and decrypts it with the user private key to obtain the result of this computing request task;

[0068] Step 10: After the task in step 9 is completed, the blockchain destroys the confidential container that executes this task, and the confidential container simultaneously clears the privacy data and calculation model of this task to achieve privacy processing in the process of multi-party data sharing.

[0069] After continuous exploration and experimentation, the present invention creates a confidential container in a trusted computing sandbox according to a computing task request issued by a data sharing party; the confidential container generates a pair of container public and private keys, and transmits the container public key to the blockchain; the blockchain synchronizes the user public key to the confidential container, and synchronizes the container public key to the data sharing party; the blockchain sends the data and the computing model to the trusted computing sandbox through a shadow page table mapping model; the trusted computing sandbox verifies the signature through the user public key, and decrypts the data and the computing model with the container private key, performs distributed data computing, obtains the distributed computing result, and then obtains the result of this computing request task; after the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container synchronously clears the privacy data and computing model of this task, so as to realize the privacy protection in the process of multi-party data sharing. The scheme is scientific, reasonable, detailed, feasible, and conducive to popularization and use.

[0070] Furthermore, the present invention can protect the privacy of the data sharing process by multiple parties, and realize a privacy computing solution with wide algorithm applicability and high performance through the integrated application of privacy computing and blockchain technology. At the same time, the present invention schedules the trusted computing sandbox through blockchain, uses shared data, executes the computing requests of the data sharing parties, and realizes privacy protection at the same time.

[0071] To achieve one of the above purposes, the third technical solution of the present invention is:

[0072] Privacy protection platform based on trusted computing sandbox,

[0073] Adopt the above-mentioned privacy processing method based on trusted computing sandbox;

[0074] It includes isolated memory module, trusted chip, and trusted computing sandbox module;

[0075] An isolated memory module is used to store data in isolation and encrypt and decrypt it;

[0076] Trusted chips are used to measure component status and computing tasks in real time, ensuring that the hardware is always trustworthy and has not been tampered with, and that computing tasks have no deviations when the trusted computing sandbox module is executing computing tasks. At the same time, measurement reports are generated as a basis for evidence storage and supervision.

[0077] The trusted computing sandbox module is used to create confidential containers and seal data to implement privacy data computing, and destroy the confidential containers after the computing task is completed.

[0078] After continuous exploration and experimentation, the present invention sets an isolated memory module, a trusted chip, and a trusted computing sandbox module, creates a confidential container in the trusted computing sandbox, and can perform real-time measurement of component status and computing tasks, thereby ensuring that the hardware is always trusted and not tampered with, and that there is no deviation in the computing tasks during the execution of computing tasks by the trusted computing sandbox module. At the same time, a measurement report is generated as a basis for evidence storage and supervision, thereby achieving privacy protection in the process of multi-party data sharing. The solution is scientific, reasonable, detailed, feasible, and conducive to popularization and use.

[0079] Compared with the prior art, the present invention has the following beneficial effects:

[0080] After continuous exploration and experimentation, the present invention creates a confidential container in a trusted computing sandbox according to a computing task request issued by a data sharing party; the confidential container generates a pair of container public and private keys, and transmits the container public key to the blockchain; the blockchain synchronizes the user public key to the confidential container, and synchronizes the container public key to the data sharing party; the blockchain sends the data and the computing model to the trusted computing sandbox through a shadow page table mapping model; the trusted computing sandbox verifies the signature through the user public key, and decrypts the data and the computing model with the container private key, performs distributed data computing, obtains the distributed computing result, and then obtains the result of this computing request task; after the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container synchronously clears the privacy data and computing model of this task, so as to realize the privacy protection in the process of multi-party data sharing. The scheme is scientific, reasonable, detailed, feasible, and conducive to popularization and use.

[0081] Furthermore, after continuous exploration and experimentation, the present invention creates a confidential container in the trusted computing sandbox by setting an isolated memory module, a trusted chip, and a trusted computing sandbox module, and can perform real-time measurement of component status and computing tasks, thereby ensuring that the hardware is always trusted and not tampered with, and that the computing tasks have no deviation during the execution of computing tasks by the trusted computing sandbox module. At the same time, a measurement report is generated as a basis for evidence storage and supervision, thereby achieving privacy protection in the process of multi-party data sharing. The solution is scientific, reasonable, detailed, feasible, and conducive to popularization and use.

[0082] Furthermore, the present invention can protect the privacy of the data sharing process by multiple parties, and realize a privacy computing solution with wide algorithm applicability and high performance through the integrated application of privacy computing and blockchain technology. At the same time, the present invention schedules the trusted computing sandbox through blockchain, uses shared data, executes the computing requests of the data sharing parties, and realizes privacy protection at the same time. BRIEF DESCRIPTION OF THE DRAWINGS

[0083] Figure 1 A flowchart of the privacy processing method based on blockchain of the present invention;

[0084] Figure 2 A system framework diagram of the privacy protection platform of the present invention;

[0085] Figure 3 A flowchart of a trusted sandbox scheduling method based on blockchain of the present invention;

[0086] Figure 4 The present invention is a flow chart of a trusted supervision method based on a blockchain state channel. DETAILED DESCRIPTION

[0087] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0088] On the contrary, the present invention covers any substitution, modification, equivalent method and scheme made on the essence and scope of the present invention as defined by the claims. Further, in order to make the public have a better understanding of the present invention, some specific details are described in detail in the detailed description of the present invention below. Those skilled in the art can fully understand the present invention without the description of these details.

[0089] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which the present invention pertains. The terms used herein are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "or / and" as used herein includes any and all combinations of one or more of the associated listed items.

[0090] The first specific embodiment of the privacy processing method based on blockchain of the present invention:

[0091] Privacy processing method based on trusted computing sandbox,

[0092] The trusted computing sandbox is scheduled through blockchain, and the shared data is used to execute the computing task requests of the data sharing party, while achieving privacy protection; it includes the following:

[0093] One or more data sharing parties issue computing task requests, and the blockchain creates a confidential container in the trusted computing sandbox based on the computing task requests;

[0094] The data sharing party generates a public and private key pair for the user. The user's private key is held by the user, and the user's public key is transmitted to the blockchain.

[0095] The confidential container generates a pair of container public and private keys, and transmits the container public key to the blockchain;

[0096] The blockchain synchronizes the user's public key to the confidential container and synchronizes the container's public key to the data sharing party;

[0097] The data sharing party encrypts the data and computing model required for the task through the container public key, signs with the user's private key, and sends them to the blockchain;

[0098] The blockchain sends data and computing models to the trusted computing sandbox through the shadow page table mapping model;

[0099] The trusted computing sandbox verifies the signature through the user's public key, decrypts the data and computing model with the container's private key, performs distributed data computing, and obtains distributed computing results. The data is sealed during the computing process.

[0100] The distributed computing results are encrypted with the user's public key, signed with the container's private key, and sent to the blockchain;

[0101] The blockchain sends the distributed computing results to the corresponding data sharing parties;

[0102] The data sharing party verifies the signature with the container public key and decrypts it with the user's private key to obtain the result of this computing request task;

[0103] After the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container simultaneously clears the privacy data and calculation model of this task to achieve privacy processing in the process of multi-party data sharing.

[0104] like Figure 1 As shown, the second specific embodiment of the privacy processing method based on blockchain of the present invention is:

[0105] Based on the privacy processing method of blockchain, privacy protection is performed on the process of multi-party data sharing. Through the integrated application of privacy computing and blockchain technology, a privacy computing solution with wide algorithm applicability and high performance is realized. The present invention schedules the trusted computing sandbox through blockchain, uses shared data, executes the computing requests of the data sharing parties, and realizes privacy protection at the same time. In this process, blockchain and trusted computing sandbox empower each other. The trusted computing sandbox uses blockchain to realize identity authentication, distributed scheduling and interactive evidence storage; blockchain uses trusted computing sandbox to realize privacy protection and perform efficient off-chain computing.

[0106] Taking the execution of a computing task as an example, the processing flow of the present invention is as follows:

[0107] Step 1: The data sharing parties generate a public-private key pair, with the private key held by themselves and the public key transmitted to the blockchain.

[0108] Step 2: The data sharing party issues a computing task request, and the blockchain creates a confidential container in the trusted computing sandbox based on the task request. The container address is obfuscated on the chain and displayed as a virtual address.

[0109] Step 3: The confidential container generates a pair of public and private keys and transmits the public key to the blockchain.

[0110] Step 4: The blockchain synchronizes the user’s public key to the confidential container and synchronizes the container’s public key to the data sharing party.

[0111] Step 5: The data sharing party encrypts the data and computing model required for the task using the container public key, signs with the user private key, and sends them to the blockchain.

[0112] Step 6: The blockchain sends the data and computing model to the trusted computing sandbox through shadow page table mapping.

[0113] In step 7, the trusted computing sandbox verifies the signature through the user's public key, decrypts the data and computing model with the container's private key, and performs distributed data computing, sealing the data during the computing process.

[0114] Step 8: The calculation result is encrypted with the user's public key, signed with the container's private key, and sent to the blockchain.

[0115] Step 9: The blockchain sends the calculation results to the specified user.

[0116] Step 10: The user verifies the signature with the container public key and decrypts it with the user private key to obtain the result of this calculation request.

[0117] Step 11: After the task is completed, the blockchain destroys the confidential container that executes this task, and the container synchronously clears the privacy data and calculation model of this task.

[0118] In the above process, the blockchain will authenticate the communication party before each communication request, and can provide corresponding services only after the verification. At the same time, the components and computing tasks of the trusted computing sandbox are measured in real time to ensure that the components are not tampered with and the computing task execution direction is not biased. The identity authentication and trust verification processes are all stored in a trustworthy manner on the blockchain. In addition, each interaction between the data sharing party and the trusted computing sandbox will also be recorded on the blockchain as a basis for consensus auditing and behavior tracing.

[0119] like Figure 2 As shown, a specific embodiment of the privacy protection platform of the present invention is:

[0120] The privacy protection platform of the present invention performs privacy computing based on a trusted computing sandbox, which includes a memory isolation execution key module, an application sandbox creation module based on memory space segmentation, and a trusted proof module based on trusted computing 3.0. The module is created using the memory isolation execution key technology, the application sandbox creation technology based on memory space segmentation, and the trusted proof technology based on trusted computing 3.0, respectively. The composition architecture is as follows: Figure 2 As shown, the specific steps include:

[0121] ① First, we need to use three key technologies, memory isolation, memory encryption, and data sealing, to implement hardware-level privacy protection technology at the memory level and form a hardware execution environment for the trusted computing sandbox. The isolated memory cannot be accessed by unauthorized entities, including other parts of the CPU, and all calculations are sealed in the isolated memory.

[0122] ② Based on the memory isolation in ①, the shadow page table mechanism is used to realize the conversion from the client virtual address to the host physical address, thereby ensuring that the isolated memory corresponds to the confidential container. When processing computing tasks, the algorithm runs in the confidential container, but the data is processed in the isolated memory.

[0123] ③ The underlying trusted execution environment has a built-in CPU-specific instruction set to drive the hardware trusted execution environment to perform privacy data calculations. When the algorithm in ② is running in a confidential container, this method can automatically compile the algorithm to the instruction set through a virtualized compilation environment, thereby driving the hardware to implement privacy computing tasks.

[0124] ④ When the hardware environment is started, the trusted chip is used to measure its trustworthiness. The measurement objects include components such as memory, BIOS, kernel, as well as computing tasks such as data structures, key processes and codes, and important table jumps. By comparing with the measurement benchmark value, it is determined that the measurement object is complete and has not been tampered with, thereby confirming its security and trustworthiness. In addition to startup, the trusted computing sandbox will also perform static and dynamic measurements during operation to provide real-time integrity verification and security protection capabilities.

[0125] ⑤When performing the trustworthy measurement in ④, a trustworthy measurement report will be generated for each measurement.

[0126] ⑥Integrate the three modules into the trusted computing sandbox device and provide corresponding capabilities in the process of the sandbox executing computing tasks. The underlying memory isolates and stores data and encrypts it. When the computing task is initiated, the application layer creates a confidential container according to the instructions and imports the algorithm. The isolated memory decrypts the data and runs the algorithm. The data is sealed during the computing process to achieve privacy data computing. During the computing process, the trusted chip measures the component status and computing tasks in real time to ensure that the hardware is always trusted and not tampered with, and the computing tasks are not biased during the sandbox's computing tasks. At the same time, a measurement report is generated as a basis for evidence storage and supervision. After the computing task is completed, the confidential container can be destroyed according to the instructions to avoid resource occupation and data redundancy.

[0127] like Figure 3 As shown, a specific embodiment of the trusted sandbox scheduling method based on blockchain of the present invention is as follows:

[0128] The blockchain-based trusted sandbox scheduling method is divided into two parts: blockchain-based trusted sandbox task scheduling and trusted computing sandbox address obfuscation. The structure is as follows: Figure 3 As shown, it includes the following:

[0129] 1. In order to make the trusted computing sandbox have distributed characteristics with high fault tolerance, high availability, and elastic expansion, the computing power requirements, computing location, business process, privacy requirements, redundant status and other information of the computing task are used as dimensions to perform distributed model orchestration, so that when the trusted computing sandbox is deployed in a cluster, it can accept distributed scheduling from the blockchain.

[0130] 2. The life cycle of the confidential container of the trusted computing sandbox is synchronized with the privacy data. After the confidential container is created, the privacy data is imported into the isolated memory bound to the container; when the container is destroyed, the privacy data is cleared from the isolated memory, thus realizing the synchronous management of the life cycle of the sandbox confidential container and the privacy data.

[0131] 3. A virtual address is generated on the chain for the trusted computing sandbox. When the data sharing party or network attacker attempts to access the trusted sandbox address, they can only obtain the virtual address. The mapping between the virtual address and the real address of the sandbox adopts the shadow page table mechanism, adding a layer of pseudo-physical address between the virtual address and the real address, and the shadow page table maintains the mapping between the virtual address and the real address.

[0132] 4. This method involves the communication between the data sharing party and the blockchain and the communication between the blockchain and the trusted computing sandbox. During the communication process, the single-packet authentication method is used to authenticate the communication object. The single-packet authentication technology generates a single data packet according to the built-in algorithm, which is encrypted and uploaded to the blockchain for identity authentication. Only after it passes can a connection be established and services be provided for it. Except for successful authentication, the blockchain discards the data packets in other cases and does not send a response message, so that the unauthenticated requesting party cannot confirm whether the blockchain exists.

[0133] 5. The task scheduling of the trusted computing sandbox and the on-chain obfuscation of the sandbox address both use the blockchain's smart contract technology to achieve unified scheduling management. When the data sharing party has computing needs, the blockchain verifies the identity of the data sharing party through single-package authentication technology, and the smart contract issues an instruction to the sandbox to create a confidential container. After verifying the sandbox identity through single-package authentication technology, the encrypted computing model and data are sent to the sandbox. The sandbox address is obfuscated on the chain, and neither the data sharing parties nor the attacker can directly access the real address of the sandbox.

[0134] After the computing task is completed, the smart contract controls the automatic destruction of the container and clears the private data synchronously.

[0135] like Figure 4 As shown, a specific embodiment of the trusted supervision method based on the blockchain state channel of the present invention is:

[0136] The trusted supervision method based on blockchain state channel consists of two parts: trusted authentication based on state channel contract, and trusted sandbox automatic verification and behavior evidence based on state channel, which includes the following steps:

[0137] Step 1: Utilize the consensus mechanism and state channel characteristics of the blockchain to build a log service chain, authorization service chain, and remote proof chain through the state channel contract. In conjunction with the identity verification and dynamic measurement requirements of the state channel contract, provide trusted evidence, identity authentication, automatic verification and other services.

[0138] Step 2: The authorization service chain and remote proof chain provide trusted authentication and identity authentication services for data sharing parties and trusted sandboxes. Before going online, dynamic measurement is required to confirm that the communication object is trustworthy and has not been tampered with. The blockchain remotely proves the identity of the object on the chain, and uses the consensus algorithm for efficient authentication, and finally authorizes and registers the identity and accesses the service.

[0139] Step 3: The log service chain provides reliable evidence for the verification and authentication process in step 2.

[0140] Step 4: Using sandbox startup, container service, kernel module, algorithm program, dynamic library, data, etc. as supervisory factors, convert the original data of each factor into a real number matrix and eigenvector, and combine them into a trusted chain measurement model to facilitate the application of the state channel machine learning algorithm to automatic measurement.

[0141] Step 5: Load the trusted chain measurement model abstracted in step 4 into the blockchain state channel, and automatically compare the trusted verification values ​​of specified supervision factors such as sandbox startup, algorithm program, and kernel module to perform automated verification measurement and supervision decision-making of the state channel.

[0142] Step 6: The result of the automatic verification of the state channel in step 5 is used as the basis for the trusted measurement authorization in the trusted sandbox scheduling management, and the corresponding access control mechanisms such as permission, blocking, and auditing are matched through the authorization service chain, thereby forming the ability to use the state channel for automatic verification, process supervision, and analytical decision-making.

[0143] Step 7: Use the log service chain to store the verification results in a reliable manner, as described in step 3. The results of the reliable storage support consensus auditing and behavior tracing in the blockchain to achieve reliable supervision.

[0144] An embodiment of a device applying the method of the present invention:

[0145] A computer device comprising:

[0146] one or more processors;

[0147] A storage device for storing one or more programs;

[0148] When the one or more programs are executed by the one or more processors, the one or more processors implement the above-mentioned privacy processing method based on the trusted computing sandbox.

[0149] A computer medium embodiment using the method of the present invention:

[0150] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the above-mentioned privacy processing method based on a trusted computing sandbox.

[0151] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, and computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0152] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or block in the flowchart and / or block diagram and the combination of the processes and / or blocks in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0153] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0154] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1The steps for the functions specified in one or more boxes.

[0155] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A privacy processing method based on a trusted computing sandbox, characterized in that: The trusted computing sandbox is scheduled through blockchain, and the shared data is used to execute the computing task requests of the data sharing party, while achieving privacy protection; It includes the following: One or more data sharing parties issue computing task requests, and the blockchain creates a confidential container in the trusted computing sandbox based on the computing task requests; The data sharing party generates a public and private key pair for the user. The user's private key is held by the user, and the user's public key is transmitted to the blockchain. The confidential container generates a pair of container public and private keys, and transmits the container public key to the blockchain; The blockchain synchronizes the user's public key to the confidential container and synchronizes the container's public key to the data sharing party; The data sharing party encrypts the data and computing model required for the task through the container public key, signs with the user's private key, and sends them to the blockchain; The blockchain sends data and computing models to the trusted computing sandbox through the shadow page table mapping model; The trusted computing sandbox verifies the signature through the user's public key, and uses the container's private key to decrypt the data and computing model, performs distributed data computing, and obtains distributed computing results. The data is sealed during the computing process. The distributed computing results are encrypted with the user's public key, signed with the container's private key, and sent to the blockchain; The blockchain sends the encrypted distributed computing results and signatures to the corresponding data sharing parties; The data sharing party verifies the signature with the container public key and decrypts it with the user's private key to obtain the result of this computing request task; After the task is completed, the blockchain destroys the confidential container that executes this task, and the confidential container simultaneously clears the private data and calculation model of this task to achieve privacy processing in the process of multi-party data sharing; The confidential container compiles the algorithm to the instruction set through a virtualized compilation environment, thereby driving the hardware to implement privacy computing tasks. Its life cycle is synchronized with the privacy data. After the confidential container is created, the privacy data is imported into the isolated memory module bound to the container; when the container is destroyed, the privacy data is cleared by the isolated memory module, thus achieving synchronous management of the life cycle of the sandbox confidential container and the privacy data. The container address of the confidential container is obfuscated on the chain and displayed as a virtual address, so that when the data sharing party or network attacker attempts to access the trusted computing sandbox address, they can only obtain the virtual address; The mapping between the virtual address and the real address of the sandbox uses the shadow page table mapping model, which adds a layer of pseudo-physical address between the virtual address and the real address, and maintains the mapping between the virtual address and the real address through the shadow page table mapping model; The shadow page table mapping model converts the client virtual address to the host physical address, thereby ensuring that the isolated memory module corresponds to the confidential container one by one.

2. The privacy processing method based on the trusted computing sandbox according to claim 1, characterized in that: The trusted computing sandbox includes a memory isolation unit, a memory encryption unit and a data sealing unit, so that the isolated memory module cannot be accessed by unauthorized entities, and the processor's calculations are sealed in the isolated memory module, thereby achieving privacy protection at the hardware and memory levels.

3. The privacy processing method based on the trusted computing sandbox according to claim 1, characterized in that: The trusted computing sandbox also includes a trusted measurement unit and a static and dynamic measurement unit; The trusted measurement unit uses the trusted chip to perform trusted measurement on the measurement object, and by comparing it with the measurement reference value, it determines that the measurement object is complete and has not been tampered with, thereby confirming its security and trustworthiness; The measurement objects include memory components or / and BIOS components or / and kernel components or / and data structures or / and key processes and codes or / and important table jump calculation tasks; The static and dynamic measurement unit is used to perform static and dynamic measurements on the running process of the trusted computing sandbox, providing real-time integrity verification and security protection capabilities.

4. The privacy processing method based on the trusted computing sandbox according to claim 1, characterized in that: The calculation method of distributed data is as follows: The computing power requirements and / or computing locations and / or business processes and / or privacy requirements and / or redundant state information requested by computing tasks are used as dimensions for distributed model orchestration, which is used for cluster deployment in trusted computing sandboxes and accepts distributed scheduling from the blockchain.

5. The privacy processing method based on the trusted computing sandbox according to any one of claims 1 to 4, characterized in that: The communication between the data sharing party and the blockchain, and the communication between the blockchain and the trusted computing sandbox, adopts a single-packet authentication model to authenticate the communication object. The single-packet authentication model generates a single data packet based on the built-in algorithm, which is encrypted and uploaded to the blockchain for identity authentication. Only after passing the authentication can a connection be established and services can be provided for it. Except for successful authentication, the blockchain discards the data packets in other cases and does not send response information, making it impossible for unauthenticated requesters to confirm whether the blockchain exists.

6. The privacy processing method based on the trusted computing sandbox according to claim 5, characterized in that: The task scheduling of the trusted computing sandbox and the on-chain obfuscation of the sandbox address both use the blockchain’s smart contract model to achieve unified scheduling management; When the data sharing party has computing task requirements, the blockchain verifies the identity of the data sharing party through a single-package authentication model, and the smart contract sends an instruction to the sandbox to create a confidential container; Similarly, through the single-package authentication model, after verifying the identity of the trusted computing sandbox, the encrypted computing model and data are sent to the trusted computing sandbox; The address of the trusted computing sandbox is obfuscated on the chain, and neither the data sharing parties nor the attackers can directly access the real address of the sandbox; After the computing task is completed, the smart contract model controls the automatic destruction of the container and clears the private data synchronously.

7. The privacy processing method based on the trusted computing sandbox according to claim 3, characterized in that: The trusted measurement unit is a trusted supervision method based on the blockchain state channel, which is divided into trusted authentication based on the state channel contract, automatic verification of the trusted computing sandbox based on the state channel, and behavior evidence storage, which specifically includes the following steps: Step 21, using the consensus mechanism and state channel characteristics of the blockchain, build a log service chain, an authorization service chain, and a remote proof chain through the state channel contract, and provide trusted evidence, identity authentication, and automatic verification services in accordance with the identity verification and dynamic measurement requirements of the state channel contract; Step 22: Use the authorization service chain and remote proof chain in step 21 to provide trusted authentication and identity authentication services for the data sharing party and the trusted computing sandbox. Before going online, dynamic measurement is required to confirm that the communication object is trustworthy and has not been tampered with. The blockchain remotely proves the identity of the data sharing party to be on the chain, and uses the consensus algorithm for efficient authentication, and finally authorizes and registers the identity and accesses the service; Step 23, the log service chain performs reliable evidence storage for the authentication and authorization process in step 22; Step 24, after the trusted evidence in step 23 is completed, the original data of each supervisory factor is converted into a real number matrix and a feature vector using sandbox startup, container service, kernel module, algorithm program, dynamic library, and data as supervisory factors, and combined into a trusted chain measurement model, so that the machine learning algorithm of the state channel can be applied to automatic measurement; Step 25, loading the trusted chain measurement model in step 24 into the blockchain state channel, and automatically comparing the trusted verification values ​​of the sandbox startup, algorithm program, and kernel module specified supervision factors to perform automated verification measurement and supervision decision-making of the state channel; Step 26, using the result of the automatic verification of the state channel in step 25 as the basis for the trusted measurement authorization in the trusted computing sandbox scheduling management, and matching the corresponding access control mechanism through the authorization service chain, thereby forming the ability to use the state channel for automatic verification, process supervision, and analytical decision-making; Access control mechanisms include allowing or blocking or auditing; The log service chain is used to provide reliable evidence of the verification results; the results of the reliable evidence support the blockchain to conduct consensus audits and behavior tracing, thereby achieving reliable supervision.

8. A privacy protection platform based on a trusted computing sandbox, characterized in that: Adopting the privacy processing method based on the trusted computing sandbox as described in any one of claims 1 to 7; It includes isolated memory module, trusted chip, and trusted computing sandbox module; An isolated memory module is used to store data in isolation and encrypt and decrypt it; Trusted chips are used to measure component status and computing tasks in real time, ensuring that the hardware is always trustworthy and has not been tampered with, and that computing tasks have no deviations when the trusted computing sandbox module is executing computing tasks. At the same time, measurement reports are generated as a basis for evidence storage and supervision. The trusted computing sandbox module is used to create confidential containers and seal data to implement privacy data computing, and destroy the confidential containers after the computing task is completed.

Images