Method for starting up an access connector system for a trusted data space

Abstract

The application provides a method for starting and running an access connector system of a trusted data space, and belongs to the field of data security.The method comprises the following steps: reading an encrypted business system image corresponding to a version of a preset starting configuration from a storage area according to the starting configuration; obtaining a temporary decryption key for decrypting the encrypted business system image; performing a decryption operation on the encrypted business system image based on the temporary decryption key to obtain a business system, and destroying the temporary decryption key after the decryption is completed; creating a memory file system in the memory; loading the business system to the memory file system; switching a system root directory to a business system root directory in the memory file system; and starting the business system.The application realizes the protection of the overall business system running environment, avoids the long-term existence of the core business logic in the form of plaintext in the storage medium during the system running, and significantly improves the ability of the business system to resist copying, reverse and tampering.

Description

Technical Field

[0001] This application relates to the field of data security, specifically to a method for starting and running an access connector system for a trusted data space. Background Technology

[0002] With the development of the data element market, trusted data space, as a new type of data circulation infrastructure, is gradually becoming a key carrier for cross-organizational and cross-domain data sharing. In the trusted data space architecture, the access connector, as the core node between data providers and data consumers, undertakes key functions such as data access, data processing, data product packaging, policy execution, and transaction control. In existing technologies, access connectors are mostly based on general operating systems and conventional application deployment methods. Their core business systems are usually stored in plaintext or weakly encrypted form on the local file system, making them vulnerable to copying, tampering, or backdoor implantation. Furthermore, they typically only encrypt single applications, plugins, or configuration files, which are then decrypted and loaded by the system before execution to achieve a certain level of program protection. However, this method does not involve the construction and isolation of the overall business system operating environment, and the decrypted program often runs directly in the original system environment, still facing the risk of being debugged, injected, or replaced. Summary of the Invention

[0003] The purpose of this application is to provide a method for starting up and running an access connector system for a trusted data space.

[0004] To achieve the above objectives, the first aspect of this application provides a method for starting and operating an access connector system for a trusted data space, comprising: Based on the preset startup configuration, read the encrypted business system image corresponding to the startup configuration version from the storage area; Obtain a temporary decryption key for decrypting the encrypted business system image; Based on the temporary decryption key, the encrypted business system image is decrypted to obtain the business system, and the temporary decryption key is destroyed after the decryption is completed. Create a memory file system in memory; Load the business system into the memory file system; Switch the system root directory to the business system root directory in the memory file system; Start the business system.

[0005] In this embodiment, the access connector system includes a hardware security module. Obtaining a temporary decryption key for decrypting the encrypted business system image includes: generating and storing a first key factor in a non-derivative form through the hardware security module; obtaining the first key factor stored in the hardware security module; and using the first key factor as a temporary decryption key.

[0006] In this embodiment of the application, obtaining the temporary decryption key for decrypting the encrypted business system image further includes: initiating a remote authentication request to the Trusted Data Space Service Platform; if the remote authentication is successful, obtaining the second key factor issued by the Trusted Data Space Service Platform; and using the second key factor as the temporary decryption key.

[0007] In this embodiment of the application, obtaining the temporary decryption key for decrypting the encrypted business system image further includes: obtaining startup status information reflecting the current operating environment status; and generating a temporary decryption key based on the first key factor, the second key factor, and the startup status information.

[0008] In this embodiment of the application, the method further includes: uploading a new version of the encrypted business system image to the storage area when the access connector system is upgraded; and modifying the startup configuration so that the startup configuration corresponds to the new version of the encrypted business system image.

[0009] In this embodiment of the application, the storage area stores multiple different versions of encrypted business system images. The method further includes: after reading the encrypted business system image of the version corresponding to the startup configuration from the storage area according to the preset startup configuration, if the access connector system fails to start or has an abnormal startup, switching to other versions of encrypted business system images and rereading the switched encrypted business system image.

[0010] In this embodiment of the application, the memory file system is not bound to the persistent storage medium, and the method further includes: destroying the memory file system when the access connector system restarts.

[0011] A second aspect of this application provides an operating apparatus for an access connector system for a trusted data space, comprising: The memory is configured to store instructions; The processor is configured to retrieve instructions from memory and, when executing the instructions, to implement the aforementioned method for starting up the access connector system for trusted data space.

[0012] A third aspect of this application provides an access connector system, including the aforementioned access connector system operating apparatus for trusted data space.

[0013] A fourth aspect of this application provides a machine-readable storage medium storing instructions that, when executed by a processor, configure the processor to perform the aforementioned method for starting up an access connector system for a trusted data space.

[0014] The above technical solution reads and starts the encrypted business system image corresponding to the configuration from the storage area, obtains a temporary decryption key, decrypts the encrypted business system image based on the temporary decryption key, obtains the business system, destroys the temporary decryption key, loads the business system into the memory file system created in memory, switches the system root directory to the business system root directory in the memory file system, and starts the business system. This achieves overall protection of the business system's operating environment, preventing core business logic from existing in plaintext form in the storage medium for a long time during system operation, and significantly improving the ability to prevent copying, reverse engineering, and tampering of the business system.

[0015] Other features and advantages of the embodiments of this application will be described in detail in the following detailed description section. Attached Figure Description

[0016] The accompanying drawings are provided to further illustrate the embodiments of this application and form part of the specification. They are used together with the following detailed description to explain the embodiments of this application, but do not constitute a limitation on the embodiments of this application. In the drawings: Figure 1 The schematic diagram illustrates a flowchart of a startup and operation method for an access connector system for a trusted data space according to an embodiment of this application; Figure 2 The diagram illustrates the internal structure of a computer device according to an embodiment of this application. Detailed Implementation

[0017] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only for illustration and explanation of the embodiments of this application and are not intended to limit the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0018] Figure 1 The illustration schematically shows a flowchart of a method for starting up and operating an access connector system for a trusted data space according to an embodiment of this application. Figure 1 As shown in one embodiment of this application, a method for starting and running an access connector system for a trusted data space is provided, including the following steps: Step 101: Based on the preset startup configuration, read the encrypted business system image corresponding to the startup configuration version from the storage area.

[0019] Step 102: Obtain a temporary decryption key for decrypting the encrypted business system image.

[0020] Step 103: Based on the temporary decryption key, decrypt the encrypted business system image to obtain the business system, and destroy the temporary decryption key after decryption.

[0021] Step 104: Create a memory file system in memory.

[0022] Step 105: Load the business system into the memory file system.

[0023] Step 106: Switch the system root directory to the business system root directory in the memory file system.

[0024] Step 107: Start the business system.

[0025] The Trusted Data Space is a data circulation and utilization infrastructure based on consensus rules, connecting multiple entities to achieve data resource sharing and utilization. The access connector system comprises a functional area, a computing area, and a storage area, which are logically isolated and interact only through controlled interfaces. The functional area includes the system kernel, the boot system, and the business system. The boot system can read the corresponding version of the encrypted business system image according to a preset startup configuration; this encrypted business system image is stored in the storage area. Then, the boot system can obtain a temporary decryption key for decrypting the encrypted business system image and decrypt it to obtain the business system. This temporary decryption key exists only during the startup phase and is immediately destroyed from memory after decryption, thus preventing the decryption key from being exposed for a long time during system operation. The boot system can then create a memory file system in memory and load the decrypted business system into it; this memory file system is not bound to any persistent storage medium. Furthermore, the boot system can switch the system root directory to the business system root directory in the memory file system through a root file system switching mechanism or an equivalent mechanism. This allows the business system to run in an independent runtime environment during the system startup phase, isolating it from the boot system in terms of file system perspective and runtime context. This isolation mechanism ensures that the boot system only undertakes trusted loading and decryption responsibilities and does not participate in the execution of specific business logic, thereby reducing the system's trusted computing base and attack surface, and improving the overall system's security and verifiability. The boot system can then start the various services within the business system.

[0026] In one embodiment, the access connector system includes a hardware security module. Obtaining a temporary decryption key for decrypting the encrypted business system image includes: generating and storing a first key factor in a non-derivative form through the hardware security module; obtaining the first key factor stored in the hardware security module and using it as a temporary decryption key; or initiating a remote authentication request to the trusted data space service platform; if the remote authentication is successful, obtaining a second key factor issued by the trusted data space service platform; using the second key factor as a temporary decryption key; or obtaining startup status information reflecting the current operating environment status, and generating a temporary decryption key based on the first key factor, the second key factor, and the startup status information. That is, the temporary decryption key can originate from the hardware security module built into the connector device, the trusted data space service platform, or a combination of both, thereby achieving binding control over the device identity, startup status, and trusted data space service platform policies.

[0027] In one embodiment, the storage area stores multiple versions of encrypted business system images. The method for starting and running the access connector system in the trusted data space further includes: after reading the encrypted business system image of the version corresponding to the startup configuration from the storage area according to the preset startup configuration, if the access connector system fails to start or encounters a startup anomaly, switching to another version of the encrypted business system image and rereading the switched encrypted business system image; when the access connector system is upgraded, uploading the new version of the encrypted business system image to the storage area; and modifying the startup configuration to make the startup configuration correspond to the new version of the encrypted business system image. For example, in one embodiment, the storage area can store multiple versions of encrypted business system images simultaneously, each encrypted business system image corresponding to an independent version identifier. The boot system can select one of the encrypted business system images for decryption and startup according to the startup configuration; when the system is upgraded, the upgrade can be completed by uploading a new encrypted business system image and modifying the startup configuration; when the system fails to start or encounters an anomaly, it can switch to another business system image to achieve a fast rollback. Using the above method, system upgrades are essentially transformed into a business system image switching process during the startup phase. This eliminates the need for online replacement of the running system, reducing upgrade risks and enabling rapid rollback in case of startup failure or abnormalities, thereby enhancing system stability and availability.

[0028] In one embodiment, the memory file system is not bound to persistent storage media. The startup and operation method for the access connector system in the trusted data space further includes destroying the memory file system upon system restart. Specifically, by constructing a memory-state root file system during the startup phase and loading the decrypted business system into this memory-state root file system for operation, the business system's operating environment does not depend on any persistent storage media. This memory-state operation model ensures that the business system's operating environment is automatically destroyed after a system restart or power failure, preventing attackers from achieving long-term persistent attacks through backdoor implantation, file tampering, or other means at the architectural level.

[0029] Through the above embodiments, the encrypted business system image corresponding to the configuration version is read from the storage area, a temporary decryption key is obtained, the encrypted business system image is decrypted based on the temporary decryption key, the business system is obtained, the temporary decryption key is destroyed, and then the business system is loaded into the memory file system created in memory. After switching the system root directory to the business system root directory in the memory file system, the business system is started. This achieves overall protection of the business system's operating environment, preventing core business logic from existing in plaintext form in the storage medium for a long time during system operation, and significantly improving the ability to prevent copying, reverse engineering, and tampering of the business system.

[0030] Figure 1 This is a flowchart illustrating a method for starting up and running an access connector system for a trusted data space, as shown in one embodiment. It should be understood that, although... Figure 1 The steps in the flowchart are shown sequentially as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise explicitly stated herein, there is no strict order in which these steps are executed, and they can be performed in other orders. Figure 1 At least some of the steps in the process may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least some of the sub-steps or stages of other steps.

[0031] In one embodiment, the startup method for the access connector system for a trusted data space includes: selecting and reading an encrypted business system image corresponding to the startup configuration version from the storage area according to a preset startup configuration; generating and storing a first key factor in a non-exportable form through a hardware security module built into the access connector; initiating a remote authentication request to the trusted data space service platform through the boot system; and obtaining a second key factor issued by the trusted data space service platform if the remote authentication is successful; generating a temporary decryption key based on the first key factor, the second key factor, and startup status information reflecting the current operating environment status; decrypting the encrypted business system image based on the temporary decryption key to obtain the business system; and immediately destroying the temporary decryption key from memory after decryption; creating a memory file system in memory and loading the decrypted business system into the memory file system, wherein the memory file system is not bound to any persistent storage medium and is automatically destroyed after the access connector system restarts; and switching the system root directory to the business system root directory in the memory file system through a root file system switching mechanism or an equivalent mechanism, thereby switching the business system to run in an independent operating environment during the system startup phase, and isolating the business system from the boot system in terms of file system perspective and operating context. Furthermore, during the upgrade of the access connector system, a new version of the encrypted business system image is uploaded to the storage area, and the startup configuration is modified to correspond with the new version of the encrypted business system image. This essentially transforms the system upgrade into a business system image switching process during the startup phase, eliminating the need for online replacement of the running system and reducing upgrade risks. After reading the encrypted business system image corresponding to the startup configuration from the storage area according to the preset startup configuration, in the event of a startup failure or abnormality in the access connector system, the system switches to another version of the encrypted business system image and rereads the switched encrypted business system image, thereby achieving rapid rollback and enhancing system stability and availability.

[0032] In one embodiment, an operating device (not shown) for an access connector system for a trusted data space is provided, comprising: The memory is configured to store instructions; The processor is configured to retrieve instructions from memory and, when executing the instructions, to implement the aforementioned method for starting up the access connector system for trusted data space.

[0033] The operating device for the access connector system for trusted data space includes a processor and a memory. The processor contains a kernel, which retrieves the corresponding program units from the memory. One or more kernels can be configured, and the startup and operation method for the access connector system for trusted data space can be implemented by adjusting the kernel parameters.

[0034] The memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0035] In one embodiment, an access connector system is provided, including the aforementioned access connector system operating device for trusted data spaces. Specifically, in one embodiment, the access connector system includes a functional area, a computing area, and a storage area, which are logically isolated from each other and interact through controlled interfaces. The functional area includes a system kernel, a boot system, and a business system. The system kernel is a trimmed-down Linux kernel used for basic hardware management and process scheduling, and possesses at least the following characteristics: disabling unnecessary driver and module loading mechanisms; enabling memory protection and process isolation mechanisms; and providing basic support for secure system startup. The boot system is a minimal runtime environment loaded during system startup, containing no specific business logic and solely used for the secure loading of the business system. The boot system's functions include at least verifying system integrity, managing encrypted business system images, obtaining and decrypting keys, building a memory file system, and switching the root directory. The business system is the core business runtime environment of the access connector, stored in the storage area as one or more encrypted business system image files. The business system includes at least an identity authentication module, a data product encapsulation module, a data transaction and strategy execution module, and a log and audit module. The computing area is used to run data processing and secure computing engines, including at least a data sandbox, a multi-party secure computing engine, data anonymization, data watermarking, and leakage prevention detection modules. The storage area is used to store encrypted source data, intermediate processing data, data products, and encrypted business system images. Data in the storage area must be stored using at least static encryption.

[0036] This application provides a storage medium storing a program that, when executed by a processor, implements the above-described method for starting and running an access connector system for a trusted data space.

[0037] This application provides a processor for running a program, wherein the program executes the above-described method for starting up and running an access connector system for trusted data space.

[0038] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 2As shown, the computer device includes a processor A01, a network interface A02, and a memory (not shown) connected via a system bus. The processor A01 provides computing and control capabilities. The memory includes internal memory A03 and a non-volatile storage medium A04. The non-volatile storage medium A04 stores an operating system B01 and a computer program B02. The internal memory A03 provides an environment for the operation of the operating system B01 and the computer program B02 stored in the non-volatile storage medium A04. The network interface A02 is used for communication with external terminals via a network connection. When executed by the processor A01, the computer program B02 implements a method for starting and running an access connector system for a trusted data space.

[0039] Those skilled in the art will understand that Figure 2 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0040] This application provides a computer (electronic) device, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, it implements the steps of any of the above-mentioned methods for starting up and running an access connector system for a trusted data space.

[0041] This application also provides a computer program product that, when executed on a data processing device, is adapted to perform a program that initializes a method for starting up an access connector system for a trusted data space.

[0042] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0043] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0044] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0045] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0046] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0047] Memory may include non-persistent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0048] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0049] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0050] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A method for starting and operating an access connector system for a trusted data space, characterized in that, The method includes: According to the preset startup configuration, read the encrypted business system image corresponding to the startup configuration version from the storage area; Obtain a temporary decryption key for decrypting the encrypted business system image; Based on the temporary decryption key, the encrypted business system image is decrypted to obtain the business system, and the temporary decryption key is destroyed after decryption is completed. Create a memory file system in memory; Load the business system into the memory file system; Switch the system root directory to the business system root directory in the memory file system; Start the business system.

2. The method for starting and operating an access connector system for a trusted data space according to claim 1, characterized in that, The access connector system includes a hardware security module, and obtaining the temporary decryption key for decrypting the encrypted business system image includes: The first key factor is generated and stored in a non-exportable form through the hardware security module; Obtain the first key factor stored in the hardware security module, and use the first key factor as the temporary decryption key.

3. The method for starting and running an access connector system for a trusted data space according to claim 1, characterized in that, The step of obtaining the temporary decryption key used to decrypt the encrypted business system image also includes: Initiate a remote authentication request to the Trusted Data Space Service Platform; If the remote authentication is successful, obtain the second key factor issued by the trusted data space service platform; The second key factor is used as the temporary decryption key.

4. The method for starting and operating an access connector system for a trusted data space according to any one of claims 2 or 3, characterized in that, The step of obtaining the temporary decryption key used to decrypt the encrypted business system image also includes: Obtain startup status information that reflects the current operating environment status; The temporary decryption key is generated based on the first key factor, the second key factor, and the startup status information.

5. The method for starting and operating an access connector system for a trusted data space according to claim 1, characterized in that, The method further includes: When the access connector system is upgraded, the new version of the encrypted business system image is uploaded to the storage area; Modify the startup configuration to make it correspond to the new version of the encrypted business system image.

6. The method for starting and operating an access connector system for a trusted data space according to claim 1, characterized in that, The storage area stores multiple different versions of encrypted business system images, and the method further includes: After reading the encrypted business system image of the version corresponding to the preset startup configuration from the storage area, if the access connector system fails to start or has an abnormal startup, the system switches to another version of the encrypted business system image and rereads the switched encrypted business system image.

7. The method for starting and operating an access connector system for a trusted data space according to claim 1, characterized in that, The memory file system is not bound to persistent storage media, and the method further includes: destroying the memory file system when the access connector system restarts.

8. An operating device for an access connector system for a trusted data space, characterized in that, include: The memory is configured to store instructions; A processor is configured to retrieve the instructions from the memory and, when executing the instructions, to implement the startup and operation method of the access connector system for a trusted data space according to any one of claims 1 to 7.

9. A connector system, characterized in that, It includes the operating apparatus of the access connector system for trusted data space as described in claim 8.

10. A machine-readable storage medium storing instructions thereon, characterized in that, When executed by a processor, this instruction causes the processor to be configured to perform the startup method for an access connector system for a trusted data space according to any one of claims 1 to 7.

Images