Security assessment, business processing, secure information transmission method and related devices

Abstract

The application provides a security evaluation, business processing, security information transmission method and related equipment, and relates to the technical field of communication. The method comprises the following steps: in the case that a security evaluation request sent by an application server is received, determining a target security evaluation result according to first security information, wherein the first security information comprises security state information of a REE of an electronic device or a security evaluation result of the REE; decrypting first ciphertext by using a root key of the electronic device to obtain a private key of the electronic device, wherein the first ciphertext is ciphertext obtained by encrypting the private key of the electronic device by using the root key of the electronic device; signing the target security evaluation result by using the private key of the electronic device to obtain a signature of the target security evaluation result; and sending second security information to the application server, wherein the second security information comprises the target security evaluation result and the signature of the target security evaluation result.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a method and related equipment for security assessment, service processing, and secure information transmission. Background Technology

[0002] Application service providers (such as mobile payment, mobile banking, and financial services) often need to conduct security assessments of electronic devices before providing services to users. They only allow access to services if the electronic device is deemed secure and trustworthy based on the assessment results. Specifically, the application server sends a security assessment request to the electronic device. Based on this request, the electronic device obtains the security status information of its Rich Execution Environment (REE), performs a security assessment, obtains the REE's security assessment result, and returns it to the application server. The application server can then determine whether to allow the electronic device to access the requested service based on this result. However, this security assessment method has relatively poor reliability. Summary of the Invention

[0003] This application provides a method and related equipment for security assessment, business processing, and secure information transmission, which can improve the reliability of security assessment results for electronic devices.

[0004] In a first aspect, embodiments of this application provide a security assessment method, the method comprising:

[0005] Upon receiving a security assessment request from an application server, the security coprocessor of the electronic device determines the target security assessment result based on first security information, wherein the first security information includes the security status information of the rich execution environment (REE) of the electronic device or the security assessment result of the REE.

[0006] The security coprocessor of the electronic device uses the root key of the electronic device to decrypt the first ciphertext to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor encrypting the private key of the electronic device using the root key of the electronic device.

[0007] The security coprocessor of the electronic device uses the private key of the electronic device to sign the target security assessment result, thereby obtaining the signature of the target security assessment result;

[0008] The electronic device sends second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result.

[0009] Secondly, embodiments of this application provide a security assessment device applied to electronic devices, the device comprising:

[0010] The first determining module is configured to determine the target security assessment result based on first security information upon receiving a security assessment request sent by the application server, wherein the first security information includes the security status information of the rich execution environment (REE) of the electronic device or the security assessment result of the REE.

[0011] The decryption module is used to decrypt the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor of the electronic device encrypting the private key of the electronic device using the root key of the electronic device.

[0012] The signature module is used to sign the target security assessment result using the private key of the electronic device to obtain the signature of the target security assessment result;

[0013] A first sending module is used to send second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result.

[0014] Thirdly, embodiments of this application provide a business processing method, the method comprising:

[0015] The application server sends a security assessment request to the electronic device, the security assessment request being used to request an assessment of the security of the electronic device;

[0016] The application server receives second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0017] The application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the second security information, wherein the target service is a service provided by the application server to the electronic device.

[0018] Fourthly, embodiments of this application provide a business processing apparatus applied to an application server, the apparatus comprising:

[0019] The third sending module is used to send a security assessment request to the electronic device, the security assessment request being used to request an assessment of the security of the electronic device;

[0020] A first receiving module is configured to receive second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0021] The third determining module is used to determine, based on the second security information, whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service, wherein the target service is a service provided by the application server to the electronic device.

[0022] Fifthly, embodiments of this application provide a secure information transmission method, the method comprising:

[0023] The management server generates a digital certificate, wherein the digital certificate includes a digital certificate of the electronic device and a digital certificate of the management server. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0024] The management server sends a second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device.

[0025] Sixthly, embodiments of this application provide a secure information transmission device applied to a management server, the device comprising:

[0026] A generation module is used to generate digital certificates, wherein the digital certificates include digital certificates of electronic devices and digital certificates of management servers. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0027] The fourth sending module is used to send second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device.

[0028] In a seventh aspect, embodiments of this application provide an electronic device including a processor and a memory, the memory storing programs or instructions executable on the processor, the programs or instructions, when executed by the processor, implementing the steps in the security assessment method as described in the first aspect.

[0029] Eighthly, embodiments of this application provide an application server that includes a processor and a memory. The memory stores programs or instructions that can run on the processor, and when the programs or instructions are executed by the processor, they implement the steps in the business processing method as described in the third aspect.

[0030] In a ninth aspect, embodiments of this application provide a management server, which includes a processor and a memory, wherein the memory stores programs or instructions that can run on the processor, and the programs or instructions, when executed by the processor, implement the steps in the secure information transmission method as described in the fifth aspect.

[0031] In a tenth aspect, embodiments of this application provide a readable storage medium storing a program or instructions that, when executed by a processor, implement the steps in the security assessment method as described in the first aspect, or the steps in the business processing method as described in the third aspect, or the steps in the secure information transmission method as described in the fifth aspect.

[0032] Eleventhly, embodiments of this application provide a chip, the chip including a processor and a communication interface, the communication interface being coupled to the processor, the processor being used to run programs or instructions to implement the method described in the first aspect, or to implement the steps in the business processing method described in the third aspect, or to implement the steps in the secure information transmission method described in the fifth aspect.

[0033] In a twelfth aspect, embodiments of this application provide a computer program product stored in a storage medium, which is executed by at least one processor to implement the method described in the first aspect, or to implement the steps in the business processing method described in the third aspect, or to implement the steps in the secure information transmission method described in the fifth aspect.

[0034] In this embodiment, upon receiving a security assessment request from an application server, the security coprocessor of the electronic device determines the target security assessment result based on first security information, wherein the first security information includes the security status information of the REE of the electronic device or the security assessment result of the REE; the security coprocessor of the electronic device decrypts the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, wherein the first ciphertext is the ciphertext obtained by the security coprocessor of the electronic device encrypting the private key of the electronic device using the root key of the electronic device; the security coprocessor of the electronic device signs the target security assessment result using the private key of the electronic device to obtain the target security assessment result. The electronic device sends second security information to the application server. This second security information includes the target security assessment result and its signature. Specifically, in this embodiment, the electronic device's security coprocessor determines the target security assessment result and signs it using the device's private key. Furthermore, the device's root key is used to encrypt the private key, thus binding the security assessment result to the electronic device and reducing the likelihood of tampering with the result. This improves the reliability of the security assessment result. Additionally, the security coprocessor's ability to resist hardware side-channel attacks and fault injection ensures the security of the aforementioned security assessment process. Attached Figure Description

[0035] Figure 1 This is a flowchart of a security assessment method provided in an embodiment of this application;

[0036] Figure 2 This is a schematic diagram of the security assessment system provided in the embodiments of this application;

[0037] Figure 3 This is a flowchart of another security assessment method provided in the embodiments of this application;

[0038] Figure 4 This is a flowchart of another security assessment method provided in the embodiments of this application;

[0039] Figure 5This is a flowchart of another security assessment method provided in the embodiments of this application;

[0040] Figure 6 This is a flowchart of another security assessment method provided in the embodiments of this application;

[0041] Figure 7 This is a schematic diagram of the structure of a safety assessment device provided in an embodiment of this application;

[0042] Figure 8 This is a schematic diagram of another safety assessment device provided in the embodiments of this application;

[0043] Figure 9 This is a schematic diagram of the structure of another safety assessment device provided in the embodiments of this application;

[0044] Figure 10 This is a schematic diagram of the structure of another safety assessment device provided in the embodiments of this application;

[0045] Figure 11 This is a schematic diagram of the structure of a business processing device provided in an embodiment of this application;

[0046] Figure 12 This is a schematic diagram of another business processing device provided in an embodiment of this application;

[0047] Figure 13 This is a schematic diagram of the structure of a secure information transmission device provided in an embodiment of this application;

[0048] Figure 14 This is a schematic diagram of another secure information transmission device provided in the embodiments of this application;

[0049] Figure 15 This is one of the structural schematic diagrams of an electronic device provided in the embodiments of this application;

[0050] Figure 16 This is a second schematic diagram of the structure of an electronic device provided in the embodiments of this application;

[0051] Figure 17 This is a schematic diagram of the structure of a server provided in an embodiment of this application. Detailed Implementation

[0052] The technical solutions of the embodiments of this application will be clearly described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application are within the scope of protection of this application.

[0053] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such use of data can be interchanged where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first," "second," etc., are generally of the same class and the number of objects is not limited; for example, a first object can be one or more. Furthermore, in the specification and claims, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0054] The security assessment method, apparatus, electronic device, management server, and application server provided in this application will be described in detail below with reference to the accompanying drawings and through specific embodiments and application scenarios.

[0055] See Figure 1 , Figure 1 This is a flowchart of a security assessment method provided in an embodiment of this application, such as... Figure 1 As shown, it includes the following steps:

[0056] Step 101: The application server sends a security assessment request to the electronic device, the security assessment request being used to request an assessment of the security of the electronic device.

[0057] In this embodiment, the application server can be any server that provides application services (e.g., mobile payment, mobile banking, financial services, etc.). The electronic device can be a terminal, which can be a mobile phone, tablet computer, laptop computer, notebook computer, personal digital assistant (PDA), handheld computer, netbook, ultra-mobile personal computer (UMPC), augmented reality (AR), virtual reality (VR) device, robot, wearable device, vehicle user equipment (VUE), shipboard equipment, pedestrian user equipment (PUE), game console, personal computer (PC), and other terminal-side devices.

[0058] The aforementioned security assessment request may include an authorization token, which, for example, may be an authorization token issued by the management server of the electronic device.

[0059] For example, the application server can send a security assessment request to the REE side of the electronic device. For instance, such as... Figure 2 As shown, the application server can send a security assessment request to the security assessment client application (i.e., Client App) on the REE side of the electronic device through the application server's security assessment module.

[0060] In some alternative embodiments, the application server may transmit the security assessment request to the electronic device based on a transport security mechanism. For example, the application server may transmit the security assessment request to the electronic device via Transport Layer Security (TLS) protocol to improve transmission security.

[0061] Step 102: When the electronic device receives a security assessment request sent by the application server, the security coprocessor of the electronic device determines the target security assessment result based on the first security information, wherein the first security information includes the security status information of the REE of the electronic device or the security assessment result of the REE.

[0062] The aforementioned electronic device includes a security coprocessor, such as a Secure Processor Unit (SPU). Furthermore, the electronic device also includes a Rich Execution Environment (REE) and a Trusted Execution Environment (TEE), wherein the REE runs a Rich Execution Environment Operating System (OS), and the TEE runs a Trusted Execution Environment Operating System, such as... Figure 2 As shown. It should be noted that the aforementioned security coprocessor possesses the ability to resist attacks such as hardware side-channel attacks and fault injection, and its security is strong. In contrast, the aforementioned TEE is susceptible to security risks such as software side-channel attacks and reverse engineering attacks on TEE applications, making its security lower compared to the security coprocessor.

[0063] Specifically, when an electronic device receives a security assessment request from an application server, the security protocol processor of the electronic device can obtain first security information and determine the target security assessment result based on the first security information. For example, the security protocol processor of the electronic device can receive the first security information from the TEE side of the electronic device, and the TEE side of the electronic device can receive the security status information of the REE from the REE side of the electronic device.

[0064] For example, the REE side of an electronic device receives a security assessment request sent by an application server, collects the security status information of the REE, and can send an authorization token and the security status information of the REE to the TEE side of the electronic device. The TEE side can then verify the validity of the authorization token to detect whether the application server has the authority to obtain the security status of the electronic device. For example, if the TEE side determines that the authorization token is valid, it determines that the application server has the authority to obtain the security status of the electronic device, and in this case, it can continue with subsequent security assessment-related operations. If the verification of the authorization token fails or the authorization token is determined to be invalid, the security assessment-related operations can be terminated, and a prompt message can be returned to prompt the application server to reapply for an authorization token.

[0065] Furthermore, if it is determined that the application server has the authority to obtain the security status of the electronic device, the TEE side can send the security status information of the REE to the security coprocessor; or, the TEE side can perform a security assessment based on the security status information of the REE, obtain the security assessment result of the REE, and send the security status information of the TEE and the security assessment result of the REE to the security coprocessor.

[0066] In some optional embodiments, the first security information may further include the security status information of the TEE of the electronic device or the security assessment result of the TEE.

[0067] Accordingly, the TEE side can collect the security status information of the TEE and send the security status information of the TEE and REE to the security coprocessor; or, the TEE side can perform a security assessment based on the security status information of the REE, obtain the security assessment result of the REE, and send the security status information of the TEE and the security assessment result of the REE to the security coprocessor; or, the TEE side can perform a security assessment based on the security status information of the REE, obtain the security assessment result of the REE, perform a security assessment based on the security status information of the TEE, obtain the security assessment result of the TEE, and send the security assessment result of the TEE and the security assessment result of the REE to the security coprocessor.

[0068] For example, when the first security information includes the security status information of the REE, the security coprocessor can perform a security assessment based on the security status information of the REE to obtain the security assessment result of the REE, and can use the security assessment result of the REE as the target security assessment result; when the first security information includes the security assessment result of the REE and the security status information of the TEE, the security coprocessor can perform a security assessment based on the security status information of the TEE to obtain the security assessment result of the TEE, and can combine the security assessment result of the REE and the security assessment result of the TEE to obtain the target security assessment result; when the first security information includes the security assessment result of the REE and the security assessment result of the TEE, the security coprocessor can directly combine the security assessment result of the REE and the security assessment result of the TEE to obtain the target security assessment result.

[0069] The target security assessment result is obtained by combining the security assessment results of the REE and the TEE. For example, the security assessment results of the REE and the TEE can be weighted and summed or comprehensively scored according to a preset model to obtain the target security assessment result.

[0070] The aforementioned security status information of REE may include, but is not limited to, indicators such as malicious / deceptive / impersonating applications, virus infection, application signature verification, verification startup, application layer data encryption, software-based memory vulnerability defense, and application layer trust measurement, as well as the status information of each indicator. For example, for the indicator element of malicious / deceptive / impersonating application, the corresponding status information can be one of non-existent, unknown, or existing. Similarly, for the indicator element of virus infection, the corresponding status information can be one of non-existent, unknown, or existing. Furthermore, for the indicator element of verification startup, the corresponding status information can be one of supported or unsupported.

[0071] For example, for security assessment based on REE security status information, the score corresponding to each indicator element can be determined based on the status information of each indicator element of the REE security status information. Then, the security assessment result of the REE can be calculated based on the score and weight of each indicator element. Alternatively, the security status information of the REE can be input into a pre-built security status assessment model to obtain the security assessment result of the REE.

[0072] The security status information of the aforementioned TEE may include, but is not limited to, indicators such as malicious / deceptive / impersonating applications, virus infection, trusted verification startup, trusted user interaction, biometric recognition, sensitive information storage, kernel real-time security protection, system integrity measurement, and kernel control flow integrity measurement, as well as the status information of each indicator. For example, for the indicator element being malicious / deceptive / impersonating applications, the corresponding status information can be one of non-existent, unknown, or existing. Similarly, for the indicator element being virus infection, the corresponding status information can be one of non-existent, unknown, or existing. Furthermore, for the indicator element being trusted verification startup, the corresponding status information can be one of supported or not supported.

[0073] For example, for security assessment based on TEE security status information, the score corresponding to each indicator element can be determined based on the status information of each indicator element of the TEE security status information. Then, the security assessment result of the TEE can be calculated based on the score and weight of each indicator element. Alternatively, the security status information of the TEE can be input into a pre-built security status assessment model to obtain the security assessment result of the TEE.

[0074] Step 103: The security coprocessor uses the root key of the electronic device to decrypt the first ciphertext to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor encrypting the private key of the electronic device using the root key of the electronic device.

[0075] The root key can be a random number generated by the electronic device. For example, it can be a random number generated by the hardware security module (HSM) or security coprocessor of the electronic device. The root key can be stored in a secure storage area, such as a one-time programmable (OTP) memory. This OTP memory can be located in the security protocol processor or in another location within the electronic device besides the security coprocessor.

[0076] It should be noted that the aforementioned root key can be a newly generated root key for the security assessment of the electronic device, that is, the aforementioned root key can be a root key specifically used for the security assessment of the electronic device; or, the aforementioned root key can also be a reused existing root key. In this case, the root key is used not only for the security assessment of the electronic device but also for other services or functions, such as for the screen lock function of the electronic device. In some optional embodiments, the existing root key in the OTP memory of the electronic device can be reused for the aforementioned security assessment of the electronic device.

[0077] The private key and public key of the aforementioned electronic device form a public-private key pair. This public-private key pair can be generated by the hardware security module or security coprocessor of the electronic device. Furthermore, the private key of the electronic device can be encrypted by the security coprocessor using the root key of the electronic device and stored in the storage area of ​​the electronic device, such as in the flash memory or OTP memory. This reduces the risk of private key leakage.

[0078] For example, the security coprocessor can read the root key of the electronic device from the security coprocessor's OTP memory and obtain the first ciphertext from the flash memory of the electronic device. Then, it can decrypt the first ciphertext based on the root key of the electronic device to obtain the private key of the electronic device.

[0079] In some alternative embodiments, the root key pair of the electronic device is generated by the security coprocessor, which can improve the security of the public-private key pair of the electronic device.

[0080] In some optional embodiments, the public-private key pair of the electronic device is generated by the security coprocessor; wherein the public-private key pair of the electronic device includes the private key of the electronic device and the public key corresponding to the private key of the electronic device, which can improve the security of the public-private key pair of the electronic device.

[0081] It should be noted that the aforementioned root key can also be called the security assessment trust root, the aforementioned electronic device's private key can also be called the device private key, and the aforementioned electronic device's public key can also be called the device public key.

[0082] Step 104: The security coprocessor uses the private key of the electronic device to sign the target security assessment result, thereby obtaining the signature of the target security assessment result.

[0083] In some optional embodiments, the security coprocessor can perform a hash calculation on the target security assessment result to obtain a hash value of the target security assessment result, and use the private key of the electronic device to sign the hash value of the target security assessment result to obtain a signature of the target security assessment result. This can improve the efficiency of signing the target security assessment result compared to directly using the private key of the electronic device to sign the target security assessment result.

[0084] Step 105: The electronic device sends the second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result.

[0085] For example, the security coprocessor can send the second security information to the TEE side, the TEE side can send the second security information to the REE side, and then the REE side can send the second security information to the application server. For instance, the security coprocessor can send the second security information to the security assessment trusted application on the TEE side, the TEE side's security assessment trusted application can send the second security information to the security assessment client application on the REE side, and then the REE side's security assessment client application can send the second security information to the security assessment module of the application server.

[0086] In some optional embodiments, the REE side of the electronic device may employ a transmission security mechanism to send the aforementioned second security information to the application server. For example, the REE side of the electronic device may transmit the aforementioned second security information to the application server based on the TLS protocol to improve the security of transmission.

[0087] Step 106: Upon receiving the second security information, the application server determines whether to allow the electronic device to access the target service or not, based on the second security information, wherein the target service is a service provided by the application server to the electronic device.

[0088] For example, the signature of the target security assessment result can be verified based on the public key of the electronic device. If the verification is successful, it can be determined whether the electronic device is allowed to access the target service or not, based on the target security assessment result. For instance, if the target security assessment result indicates that the electronic device is secure, it is allowed to access the target service; if the target security assessment result indicates that the electronic device is insecure, it is not allowed to access the target service. It is understood that if the signature of the target security assessment result fails verification, the electronic device is not allowed to access the target service.

[0089] This application embodiment determines the target security assessment result through a security coprocessor, signs the target security assessment result using the private key of the electronic device, and encrypts the private key of the electronic device using the root key of the electronic device. This binds the security assessment result to the electronic device, reducing the possibility of tampering with the security assessment result and thus improving the reliability of the security assessment result of the electronic device. Furthermore, since the security coprocessor has the ability to resist attacks such as hardware side-channel attacks and fault injection, the security of the above-mentioned security assessment process can be guaranteed.

[0090] In some optional embodiments, the second security information further includes first digital certificate information, which includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device;

[0091] The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0092] In this embodiment, the management server described above can be used to manage electronic devices. The private key of the management server and the public key of the management server form a public-private key pair for the management server. Exemplarily, the public-private key pair of the management server can be generated by the management server's Key Management Service (KMS) or hardware security module, and stored in the management server's hardware security module. It should be noted that the private key of the management server can also be called the server private key, and the public key of the management server can also be called the server public key.

[0093] In some optional embodiments, the first digital certificate information may further include the digital certificate of the management server or the identifier of the digital certificate of the management server;

[0094] The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0095] Accordingly, before step 105 above, that is, before the electronic device sends the second security information to the application server, the method may further include:

[0096] The management server generates a digital certificate, which includes a digital certificate for an electronic device and a digital certificate for the management server. The digital certificate for the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The digital certificate for the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0097] The management server sends a second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device;

[0098] The electronic device stores the second digital certificate information upon receiving it from the management server.

[0099] Specifically, the management server can sign the public key of the electronic device with its private key to obtain the digital certificate of the electronic device, and can sign the public key of the management server with its private key or the private key corresponding to the public key of the target digital certificate to obtain the digital certificate of the management server. The management server can then send the digital certificate of the electronic device and the digital certificate of the management server to the electronic device, and the electronic device can store the digital certificate of the electronic device and the digital certificate of the management server in the flash memory of the electronic device.

[0100] In some optional embodiments, before generating a digital certificate, the management server can receive a digital certificate generation request from the electronic device, and then the management server can generate a digital certificate based on the aforementioned digital certificate generation request. Optionally, the aforementioned digital certificate generation request may include the public key of the electronic device.

[0101] In some optional embodiments, the second digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server.

[0102] Accordingly, step 106 above, that is, the application server determining whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the second security information, may include:

[0103] The application server verifies the digital certificate of the management server based on the public key in the digital certificate of the management server or the target digital certificate;

[0104] If the digital certificate of the management server is verified, the application server verifies the digital certificate of the electronic device based on the digital certificate of the management server.

[0105] If the digital certificate of the electronic device is verified, the application server verifies the signature of the target security assessment result based on the digital certificate of the electronic device.

[0106] If the signature of the target security assessment result is verified, the application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the target security assessment result.

[0107] It is understood that, when the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, the application server verifies the digital certificate of the management server based on the public key in the digital certificate of the management server; when the digital certificate of the management server is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, the application server verifies the digital certificate of the management server based on the target digital certificate.

[0108] The above-mentioned determination of whether to allow the electronic device to access the target service or not based on the target security assessment result means, for example, if the target security assessment result determines that the electronic device is a secure device, the application server allows the electronic device to access the target service; if the target security assessment result determines that the electronic device is an insecure device, the application server does not allow the electronic device to access the target service.

[0109] In some alternative embodiments, the application server will not allow the electronic device to access the target service if any of the following conditions are met:

[0110] The digital certificate for the management server failed verification or verification was not approved.

[0111] The digital certificate of the electronic device failed verification or verification was not passed.

[0112] The signature of the target security assessment result failed verification or verification failed.

[0113] This application embodiment verifies the digital certificate chain (i.e., the digital certificate of the management server, the digital certificate of the electronic device, and the signature of the target security assessment result) based on the target digital certificate or the digital certificate of the management server. Only when the above-mentioned digital certificates are verified successfully is the target security assessment result used to determine whether the electronic device is allowed to access the target service or not allowed to access the target service. This can further reduce the possibility of the target security assessment result being tampered with by attackers, thereby further ensuring the reliability of the security assessment.

[0114] In some optional implementations, if the second digital certificate information also includes the digital certificate of the management server, the application server can directly verify the digital certificate of the management server based on the public key or target digital certificate in the digital certificate of the management server. If the second digital certificate information also includes the identifier of the digital certificate of the management server, the application server can obtain the digital certificate of the management server from the management server based on the identifier of the digital certificate of the management server, and then verify the digital certificate of the management server based on the public key or target digital certificate in the digital certificate of the management server.

[0115] In some optional implementations, if the second digital certificate information does not include the digital certificate of the management server or the identifier of the digital certificate of the management server, the application server can determine the identifier of the digital certificate of the management server based on the digital certificate of the electronic device, obtain the digital certificate of the management server based on the identifier of the digital certificate of the management server, and then verify the digital certificate of the management server based on the public key or target digital certificate in the digital certificate of the management server.

[0116] In some optional embodiments, before step 102 above, that is, before the security coprocessor determines the target security assessment result based on the first security information, the method further includes:

[0117] The security coprocessor obtains the target verification result of the electronic device, wherein the target verification result is the verification result obtained by the management server in verifying the security of the electronic device;

[0118] Accordingly, step 102 above, that is, the security coprocessor determining the target security assessment result based on the first security information, includes:

[0119] If the target verification result indicates that the electronic device is a secure device, the security coprocessor determines the target security assessment result based on the first security information.

[0120] For example, the security coprocessor can send a verification request to the management server and receive the verification result from the management server every time a security assessment is required, so as to ensure that the electronic device itself is a secure device every time a security assessment is performed; or, the security coprocessor can periodically send a verification request to the management server, receive the verification result from the management server and store it, and determine the security of the electronic device itself based on the verification result in each period, so as to save costs while ensuring that the electronic device itself is a secure device.

[0121] Accordingly, after obtaining the target verification result, if the target verification result indicates that the electronic device is a secure device, the security coprocessor can determine the target security assessment result based on the first security information; if the target verification result indicates that the electronic device is an insecure device, the security coprocessor can end the process, that is, stop the security assessment-related operations, and prompt the application server that the security assessment failed or the electronic device is an insecure device.

[0122] This application embodiment verifies the security of the electronic device itself through a management server. This ensures that if the electronic device itself is secure, the security coprocessor determines the target security assessment result based on the first security information, thereby further improving the reliability of the security assessment of the electronic device.

[0123] See Figure 3 , Figure 3 This is a flowchart of a security assessment method provided in an embodiment of this application, such as... Figure 3 As shown, it includes the following steps:

[0124] Step 301: The application server sends a security assessment request to the REE side of the electronic device. The security assessment request is used to request an assessment of the security of the electronic device, and the security assessment request includes an authorization token.

[0125] Step 302: Upon receiving a security assessment request sent by the application server, the REE side of the electronic device obtains the security status information of the REE.

[0126] Step 303: The REE side of the electronic device sends the authorization token and the security status information of the REE to the TEE side of the electronic device.

[0127] Step 304: Upon receiving the authorization token and the security status information of the REE, the TEE side of the electronic device verifies whether the authorization token is valid.

[0128] If the TEE side determines that the authorization token is valid, it determines that the application server has the right to obtain the security status of the electronic device. In this case, step 305 is executed. Otherwise, the security assessment operation can be terminated and a prompt message can be returned to prompt the application server to reapply for the authorization token.

[0129] Step 305: The TEE side of the electronic device collects the security status information of the TEE, performs a security assessment based on the security status information of the REE, and obtains the security assessment result of the REE.

[0130] Step 306: The TEE side of the electronic device sends the first security information to the security coprocessor of the electronic device. The first security information includes the security status information of the TEE and the security assessment result of the REE.

[0131] It should be noted that steps 301 to 306 above can be found in the relevant descriptions of the foregoing embodiments, and will not be repeated here.

[0132] Step 307: Upon receiving the first security information, the security coprocessor sends a verification request to the management server via the TEE and REE of the electronic device. The verification request is used to request verification of the security of the electronic device and includes security verification-related parameters of the electronic device.

[0133] In some optional embodiments, upon receiving the first security information, the security coprocessor queries whether there is a valid verification result for the electronic device within the electronic device; if there is a valid verification result for the electronic device within the electronic device, the valid verification result for the electronic device is determined as the target verification result; if there is no valid verification result for the electronic device within the electronic device, the security coprocessor sends a verification request to the management server through the TEE and REE of the electronic device. This not only improves the efficiency of security verification of the electronic device, but also saves resource overhead.

[0134] It should be noted that, in this embodiment, after the security coprocessor receives the verification result from the management server each time through the electronic device's TEE and REE, it can store the verification result and set a corresponding validity period. Within this validity period, it can determine whether the electronic device itself is a secure device based on the verification result. The aforementioned validity period can be reasonably set according to actual needs.

[0135] Optionally, the security verification-related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0136] For example, the device fingerprint mentioned above can be information that uniquely identifies the electronic device, such as the device's unique serial number, device identifier, etc.

[0137] Step 308: Upon receiving the verification request, the management server verifies the security of the electronic device based on the security verification-related parameters of the electronic device and obtains a verification result, wherein the verification result is used to indicate whether the electronic device is a secure device or an insecure device.

[0138] For example, the management server can verify the security of an electronic device based on factors such as whether the system version is the latest version, whether the firmware version is the latest version, whether the system has been rooted, whether the hardware configuration has been tampered with, and whether the firmware configuration has been tampered with, and obtain a verification result. This security verification of the electronic device by the management server can also be referred to as remote device authentication, and the verification result can also be referred to as the remote device authentication result.

[0139] In some optional embodiments, after the management server verifies the security of the electronic device based on security verification-related parameters and obtains the verification result, the method further includes:

[0140] The management server sends the verification result to the application server.

[0141] In this embodiment, the management server can also send the verification result to the application server. The application server can determine whether the electronic device itself is a secure device or an insecure device based on the above verification result, and then decide whether to allow the electronic device to access the target service.

[0142] For example, if the verification result indicates that the electronic device is a secure device, the application server can determine whether to allow the electronic device to access the target service based on the target security assessment result. If the verification result indicates that the electronic device is an insecure device, the application server can disallow the electronic device to access the target service.

[0143] In some optional embodiments, if the verification result indicates that the electronic device is an insecure device, the management server sends the verification result to the application server; accordingly, upon receiving the verification result, the application server does not allow the electronic device to access the target service.

[0144] Step 309: The management server sends the verification result to the electronic device.

[0145] Step 310: When the security coprocessor receives the verification result sent by the management server through the TEE and REE of the electronic device, if the verification result indicates that the electronic device is a secure device, then the target security assessment result is determined based on the first security information.

[0146] Optionally, if the verification result indicates that the electronic device is an insecure device, the electronic device sends a first indication message to the application server. The first indication message is used to indicate that the electronic device is an insecure device or that the security assessment of the electronic device has failed.

[0147] Step 311: The security coprocessor of the electronic device decrypts the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor encrypting the private key of the electronic device using the root key of the electronic device.

[0148] Step 312: The security coprocessor of the electronic device uses the private key of the electronic device to sign the target security assessment result, thereby obtaining the signature of the target security assessment result.

[0149] Step 313: The security coprocessor of the electronic device sends the second security information to the TEE side, wherein the second security information includes the target security assessment result, the signature of the target security assessment result and the first digital certificate information, the first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device, and the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0150] In some optional embodiments, the first digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server.

[0151] Step 314: The TEE side sends the second security information to the REE side.

[0152] Step 315: The REE side sends the second security information to the application server.

[0153] Step 316: Upon receiving the second security information, the application server determines whether to allow the electronic device to access the target service or not, based on the second security information, wherein the target service is a service provided by the application server to the electronic device.

[0154] It should be noted that steps 311 to 316 above can be found in the relevant descriptions of the foregoing embodiments, and will not be repeated here.

[0155] This embodiment of the application determines the target security assessment result through the security coprocessor of the electronic device, signs the target security assessment result using the private key of the electronic device, and encrypts the private key of the electronic device using the root key of the electronic device. This binds the security assessment result to the electronic device, reducing the possibility of tampering with the security assessment result and thus improving the reliability of the security assessment result of the electronic device. Furthermore, the security of the electronic device itself is verified by the management server. This ensures that if the electronic device itself is secure, the security coprocessor determines the target security assessment result based on the first security information, further improving the reliability of the security assessment of the electronic device.

[0156] See Figure 4 , Figure 4 This is a flowchart of a security assessment method provided in an embodiment of this application, such as... Figure 4 As shown, it includes the following steps:

[0157] Step 401: Upon receiving a security assessment request from the application server, the security coprocessor of the electronic device determines the target security assessment result based on the first security information, wherein the first security information includes the security status information of the rich execution environment (REE) of the electronic device or the security assessment result of the REE.

[0158] Specifically, when an electronic device receives a security assessment request from an application server, the security protocol processor of the electronic device can obtain first security information and determine the target security assessment result based on the first security information. For example, the security protocol processor of the electronic device can receive the first security information from the TEE side of the electronic device, and the TEE side of the electronic device can receive the security status information of the REE from the REE side of the electronic device.

[0159] Step 402: The security coprocessor of the electronic device decrypts the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor encrypting the private key of the electronic device using the root key of the electronic device.

[0160] Step 403: The security coprocessor of the electronic device uses the private key of the electronic device to sign the target security assessment result, thereby obtaining the signature of the target security assessment result.

[0161] Step 404: The electronic device sends the second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result.

[0162] Optionally, the root key is stored in the OTP memory of the electronic device.

[0163] In this embodiment, storing the root key in an OTP memory can prevent the root key from being tampered with.

[0164] It should be noted that the aforementioned OTP memory may be located in the security coprocessor, or it may be located in a different location within the electronic device than the security coprocessor.

[0165] Optionally, the root key of the electronic device is generated by the security coprocessor.

[0166] In this embodiment, the root key of the electronic device is generated by a security coprocessor. Since the security coprocessor has the ability to resist attacks such as hardware side-channel attacks and fault injection, the security of the root key of the electronic device is improved.

[0167] Optionally, the public-private key pair of the electronic device is generated by the security coprocessor;

[0168] The public-private key pair of the electronic device includes the private key of the electronic device and the public key corresponding to the private key of the electronic device.

[0169] In this embodiment, the public and private key pairs of the electronic device are generated by the security coprocessor. Since the security coprocessor has the ability to resist attacks such as hardware side-channel and fault injection, the security of the public and private key pairs of the electronic device is improved.

[0170] In some alternative embodiments, the root key of the electronic device is generated by the security coprocessor and stored in the security coprocessor's OTP memory, so that the root key of the electronic device can only be accessed by the security coprocessor and is not exposed to any software.

[0171] In some optional embodiments, the root key of the electronic device is different from other device identifiers of the electronic device, that is, other device identifiers of the electronic device are not reused as the root key. This can prevent different services from being associated through the same device identifier, thereby reducing security risks such as device tracking and information leakage.

[0172] Optionally, the second security information further includes first digital certificate information, which includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device;

[0173] The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0174] Optionally, the first digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server;

[0175] The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0176] Optionally, before the security coprocessor of the electronic device determines the target security assessment result based on the first security information, the method further includes:

[0177] The electronic device acquires the target verification result of the electronic device, wherein the target verification result is the verification result obtained by the management server in verifying the security of the electronic device;

[0178] The security coprocessor of the electronic device determines the target security assessment result based on the first security information, including:

[0179] If the target verification result indicates that the electronic device is a secure device, the security coprocessor of the electronic device determines the target security assessment result based on the first security information.

[0180] Optionally, the method further includes:

[0181] If the target verification result indicates that the electronic device is an insecure device, the electronic device sends a first indication message to the application server. The first indication message is used to indicate that the electronic device is an insecure device or that the security assessment of the electronic device has failed.

[0182] Optionally, the electronic device acquires the target verification result of the electronic device, including:

[0183] The electronic device sends a verification request to the management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0184] The electronic device receives the verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

[0185] Optionally, before the electronic device sends a verification request to the management server, the method further includes:

[0186] The electronic device queries whether there is a verification result for the electronic device that is still valid.

[0187] If the electronic device contains a valid verification result, the electronic device will determine the valid verification result as the target verification result.

[0188] The electronic device sends a verification request to the management server, including:

[0189] If no valid verification result for the electronic device is found within the electronic device's internal storage, the electronic device sends a verification request to the management server.

[0190] Optionally, the security verification-related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0191] Optionally, the first security information may also include the security status information of the Trusted Execution Environment (TEE) of the electronic device or the security assessment result of the TEE.

[0192] Optionally, the first security information includes the security assessment results of the REE and the security status information of the TEE;

[0193] The security coprocessor of the electronic device determines the target security assessment result based on the first security information, including:

[0194] The security coprocessor of the electronic device performs a security assessment on the TEE based on the security status information of the TEE, and obtains the security assessment result of the TEE.

[0195] The security coprocessor of the electronic device determines the target security assessment result based on the security assessment results of the TEE and the security assessment results of the REE.

[0196] In this embodiment, a security coprocessor is used to perform a security assessment on the TEE. Compared to performing a security assessment on the TEE itself, this can improve the reliability of the security assessment results.

[0197] Optionally, the security assessment result of the REE is the security assessment result obtained by the TEE based on the security status information of the REE.

[0198] In this embodiment, the security assessment result of the REE is obtained by performing a security assessment based on the security status information of the REE through the TEE. Compared with the security assessment result of the REE based on the security status information of the REE, the reliability of the security assessment result of the REE can be improved.

[0199] It should be noted that the implementation method of this method can be found in [reference needed]. Figure 1 and Figure 3 The relevant descriptions of the embodiments shown are not repeated here.

[0200] See Figure 5 , Figure 5 This is a flowchart of a business processing method provided in an embodiment of this application, such as... Figure 5 As shown, it includes the following steps:

[0201] Step 501: The application server sends a security assessment request to the electronic device, the security assessment request being used to request an assessment of the security of the electronic device;

[0202] Step 502: The application server receives second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0203] Step 503: The application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the second security information, wherein the target service is the service provided by the application server to the electronic device.

[0204] Optionally, the application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the second security information, including:

[0205] The application server verifies the digital certificate of the management server based on the public key in the digital certificate of the management server or the target digital certificate. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0206] If the digital certificate of the management server is verified, the application server verifies the digital certificate of the electronic device based on the digital certificate of the management server.

[0207] If the digital certificate of the electronic device is verified, the application server verifies the signature of the target security assessment result based on the digital certificate of the electronic device.

[0208] If the signature of the target security assessment result is verified, the application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the target security assessment result.

[0209] Optionally, the first digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server.

[0210] Optionally, before the application server verifies the management server's digital certificate based on the first digital certificate, the method further includes:

[0211] The application server determines the identifier of the management server's digital certificate based on the digital certificate of the electronic device;

[0212] The application server obtains the digital certificate of the management server based on the identifier of the management server's digital certificate.

[0213] It should be noted that the implementation method of this method can be found in [reference needed]. Figure 1 and Figure 3 The relevant descriptions of the embodiments shown are not repeated here.

[0214] See Figure 6 , Figure 6 This is a flowchart of a secure information transmission method provided in an embodiment of this application, such as... Figure 6 As shown, it includes the following steps:

[0215] Step 601: The management server generates a digital certificate, wherein the digital certificate includes a digital certificate of the electronic device and a digital certificate of the management server. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0216] Step 602: The management server sends second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device.

[0217] In some alternative embodiments, the management server may receive a digital certificate generation request sent by an electronic device and generate a digital certificate in response to the reason for digital certificate generation.

[0218] Optionally, the private key of the management server is stored in the hardware security module (HSM) of the management server.

[0219] Optionally, the method further includes:

[0220] The management server receives a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0221] The management server verifies the security of the electronic device based on the security verification parameters of the electronic device and obtains a verification result, wherein the verification result is used to indicate whether the electronic device is a secure device or an insecure device;

[0222] The management server sends the verification result to the electronic device.

[0223] Optionally, the security verification-related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0224] It should be noted that the implementation method of this method can be found in [reference needed]. Figure 1 and Figure 3 The relevant descriptions of the embodiments shown are not repeated here.

[0225] The secure information transmission method provided in this application can be executed by a secure information transmission device. This application uses an example of a secure information transmission device executing the secure information transmission method to illustrate the secure information transmission device provided in this application.

[0226] See Figure 7 , Figure 7 This is a schematic diagram of a security assessment device provided in an embodiment of this application. This security assessment device is applied to electronic devices, such as... Figure 7 As shown, the safety assessment device 700 includes:

[0227] The first determining module 701 is used to determine the target security assessment result based on first security information when receiving a security assessment request sent by the application server, wherein the first security information includes the security status information of the rich execution environment (REE) of the electronic device or the security assessment result of the REE.

[0228] The decryption module 702 is used to decrypt the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor of the electronic device encrypting the private key of the electronic device using the root key of the electronic device.

[0229] The signature module 703 is used to sign the target security assessment result using the private key of the electronic device to obtain the signature of the target security assessment result;

[0230] The first sending module 704 is used to send second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result.

[0231] Optionally, the root key is stored in the one-time programmable OTP memory of the electronic device.

[0232] Optionally, the root key of the electronic device is generated by the security coprocessor.

[0233] Optionally, the public-private key pair of the electronic device is generated by the security coprocessor;

[0234] The public-private key pair of the electronic device includes the private key of the electronic device and the public key corresponding to the private key of the electronic device.

[0235] Optionally, the second security information further includes first digital certificate information, which includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device;

[0236] The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0237] Optionally, the first digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server;

[0238] The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0239] Optionally, see Figure 8 The device further includes:

[0240] The first acquisition module 705 is used to acquire the target verification result of the electronic device before determining the target security assessment result based on the first security information, wherein the target verification result is the verification result obtained by the management server verifying the security of the electronic device;

[0241] The first determining module 701 is specifically used for:

[0242] If the target verification result indicates that the electronic device is a secure device, the target security assessment result is determined based on the first security information.

[0243] Optionally, see Figure 9 The device further includes:

[0244] The second sending module 706 is used to send first indication information to the application server when the target verification result indicates that the electronic device is an insecure device. The first indication information is used to indicate that the electronic device is an insecure device or that the security assessment of the electronic device has failed.

[0245] Optionally, the first acquisition module 705 is specifically used for:

[0246] Send a verification request to the management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0247] Receive the verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

[0248] Optionally, see Figure 10 The device further includes:

[0249] The query module 707 is used to query whether there is a valid verification result for the electronic device in the electronic device before sending the verification request to the management server;

[0250] The second determining module 708 is used to determine the valid verification result of the electronic device as the target verification result when there is a valid verification result of the electronic device in the electronic device.

[0251] The first acquisition module 705 is specifically used for:

[0252] If no valid verification result for the electronic device is found within the electronic device, a verification request is sent to the management server.

[0253] Optionally, the security verification-related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0254] Optionally, the first security information may also include the security status information of the Trusted Execution Environment (TEE) of the electronic device or the security assessment result of the TEE.

[0255] Optionally, the first security information includes the security assessment results of the REE and the security status information of the TEE;

[0256] The first determining module 701 is specifically used for:

[0257] Based on the security status information of the TEE, a security assessment of the TEE is performed to obtain the security assessment result of the TEE;

[0258] The target security assessment result is determined based on the security assessment results of the TEE and the security assessment results of the REE.

[0259] Optionally, the security assessment result of the REE is the security assessment result obtained by the TEE based on the security status information of the REE.

[0260] The security assessment device in this application embodiment can be an electronic device or a component within an electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal or other devices besides a terminal. For example, the electronic device can be a mobile phone, tablet computer, laptop computer, PDA, in-vehicle electronic device, mobile internet device (MID), augmented reality (AR) / virtual reality (VR) device, robot, wearable device, ultra-mobile personal computer (UMPC), netbook, or personal digital assistant (PDA), etc. It can also be a server, network attached storage (NAS), personal computer (PC), television set (TV), ATM, or self-service machine, etc. This application embodiment does not specifically limit the device.

[0261] The security assessment device in this application embodiment can be a device with an operating system. This operating system can be Android, iOS, or other possible operating systems; this application embodiment does not specifically limit the specific operating system used.

[0262] The security assessment device provided in this application embodiment can realize all the processes implemented in the above method embodiments, and will not be described again here to avoid repetition.

[0263] See Figure 11 , Figure 11 This is a schematic diagram of a business processing device provided in an embodiment of this application. This business processing device is applied to an application server, such as... Figure 11 As shown, the service processing device 1100 includes:

[0264] The third sending module 1101 is used to send a security assessment request to an electronic device, the security assessment request being used to request an assessment of the security of the electronic device;

[0265] The first receiving module 1102 is configured to receive second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0266] The third determining module 1103 is used to determine whether the electronic device is allowed to access the target service or not allowed to access the target service based on the second security information, wherein the target service is the service provided by the application server to the electronic device.

[0267] Optionally, the third determining module is specifically used for:

[0268] The digital certificate of the management server is verified based on the public key in the digital certificate of the management server or the target digital certificate. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is the digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0269] If the digital certificate of the management server is verified, the digital certificate of the electronic device is verified based on the digital certificate of the management server;

[0270] If the digital certificate of the electronic device is verified, the signature of the target security assessment result is verified based on the digital certificate of the electronic device.

[0271] If the signature of the target security assessment result is verified, the system determines whether the electronic device is allowed to access the target service or not.

[0272] Optionally, the first digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server.

[0273] Optionally, see Figure 12 The device further includes:

[0274] The fourth determining module 1104 is used to determine the identifier of the digital certificate of the management server based on the digital certificate of the electronic device before verifying the digital certificate of the management server based on the first digital certificate;

[0275] The second acquisition module 1105 is used to acquire the digital certificate of the management server based on the identifier of the digital certificate of the management server.

[0276] The business processing device in the embodiments of this application can be a server or a component in the server, such as an integrated circuit or a chip.

[0277] The business processing apparatus provided in this application embodiment can implement the various processes implemented in the above method embodiments. To avoid repetition, it will not be described again here.

[0278] See Figure 13 , Figure 13 This is a schematic diagram of a secure information transmission device provided in an embodiment of this application. This secure information transmission device is applied to a management server, such as... Figure 13 As shown, the secure information transmission device 1300 includes:

[0279] The generation module 1301 is used to generate a digital certificate, wherein the digital certificate includes a digital certificate of an electronic device and a digital certificate of the management server. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0280] The fourth sending module 1302 is used to send second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device.

[0281] Optionally, the second digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server.

[0282] Optionally, the private key of the management server is stored in the hardware security module (HSM) of the management server.

[0283] Optionally, see Figure 14 The device further includes:

[0284] The second receiving module 1303 is used to receive a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0285] The verification module 1304 is used to verify the security of the electronic device according to the security verification-related parameters of the electronic device and obtain a verification result, wherein the verification result is used to indicate whether the electronic device is a secure device or an insecure device;

[0286] The fifth sending module 1305 is used to send the verification result to the electronic device.

[0287] Optionally, the security verification-related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0288] The secure information transmission device in this application embodiment can be a server or a component within the server, such as an integrated circuit or a chip.

[0289] The secure information transmission device provided in this application embodiment can implement all the processes implemented in the above method embodiments, and will not be described again here to avoid repetition.

[0290] Optional, such as Figure 15 As shown, this application embodiment also provides an electronic device 1500, including a processor 1501 and a memory 1502. The memory 1502 stores a program or instructions that can run on the processor 1501. When the program or instructions are executed by the processor 1501, they implement the various steps of the above-described security assessment method embodiment and can achieve the same technical effect. To avoid repetition, they will not be described again here.

[0291] It should be noted that the electronic devices in the embodiments of this application include mobile electronic devices and non-mobile electronic devices.

[0292] Figure 16 A schematic diagram of the hardware structure of an electronic device to implement an embodiment of this application.

[0293] The electronic device 1600 includes, but is not limited to, components such as: a radio frequency unit 1601, a network module 1602, an audio output unit 1603, an input unit 1604, a sensor 1605, a display unit 1606, a user input unit 1607, an interface unit 1608, a memory 1609, and a processor 1610. The processor 1610 may be a security coprocessor.

[0294] Those skilled in the art will understand that the electronic device 1600 may also include a power supply (such as a battery) for supplying power to various components. The power supply may be logically connected to the processor 1610 through a power management system, thereby enabling functions such as managing charging, discharging, and power consumption through the power management system. Figure 16 The electronic device structure shown does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown, or combine certain components, or have different component arrangements, which will not be elaborated here.

[0295] The processor 1610 is configured to, upon receiving a security assessment request from an application server, determine a target security assessment result based on first security information, wherein the first security information includes the security status information of the rich execution environment (REE) of the electronic device or the security assessment result of the REE; decrypt a first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, wherein the first ciphertext is ciphertext obtained by the security coprocessor of the electronic device encrypting the private key of the electronic device using the root key of the electronic device; and sign the target security assessment result using the private key of the electronic device to obtain a signature of the target security assessment result.

[0296] Radio frequency unit 1601 is used to send second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result.

[0297] Optionally, the root key is stored in the one-time programmable OTP memory of the electronic device.

[0298] Optionally, the root key of the electronic device is generated by the security coprocessor.

[0299] Optionally, the public-private key pair of the electronic device is generated by the security coprocessor;

[0300] The public-private key pair of the electronic device includes the private key of the electronic device and the public key corresponding to the private key of the electronic device.

[0301] Optionally, the second security information further includes first digital certificate information, which includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device;

[0302] The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

[0303] Optionally, the first digital certificate information may also include the digital certificate of the management server or the identifier of the digital certificate of the management server;

[0304] The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0305] Optionally, the processor 1610 is further configured to obtain a target verification result of the electronic device before determining the target security assessment result based on the first security information, wherein the target verification result is a verification result obtained by the management server verifying the security of the electronic device;

[0306] The processor 1610 is specifically used for:

[0307] If the target verification result indicates that the electronic device is a secure device, the target security assessment result is determined by the security coprocessor based on the first security information.

[0308] Optionally, the radio frequency unit 1601 is further configured to send a first indication information to the application server when the target verification result indicates that the electronic device is an insecure device, the first indication information being used to indicate that the electronic device is an insecure device or that the security assessment of the electronic device has failed.

[0309] Optionally, the processor 1610 is specifically used for:

[0310] Send a verification request to the management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0311] Receive the verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

[0312] Optionally, the processor 1610 is further configured to:

[0313] Before sending a verification request to the management server, the system queries whether there is a valid verification result for the electronic device within the electronic device's memory.

[0314] If a valid verification result for the electronic device exists within the electronic device's memory, the valid verification result for the electronic device shall be determined as the target verification result.

[0315] If no valid verification result for the electronic device is found within the electronic device, a verification request is sent to the management server.

[0316] Optionally, the security verification-related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0317] Optionally, the first security information may also include the security status information of the Trusted Execution Environment (TEE) of the electronic device or the security assessment result of the TEE.

[0318] Optionally, the first security information includes the security assessment results of the REE and the security status information of the TEE;

[0319] The processor 1610 is specifically used for:

[0320] Based on the security status information of the TEE, a security assessment of the TEE is performed to obtain the security assessment result of the TEE;

[0321] The target security assessment result is determined based on the security assessment results of the TEE and the security assessment results of the REE.

[0322] Optionally, the security assessment result of the REE is the security assessment result obtained by the TEE based on the security status information of the REE.

[0323] It should be understood that, in this embodiment, the input unit 1604 may include a graphics processing unit (GPU) 16041 and a microphone 16042. The GPU 16041 processes image data of still images or videos obtained by an image capture device (such as a camera) in video capture mode or image capture mode. The display unit 1606 may include a display panel 16061, which may be configured in the form of a liquid crystal display, an organic light-emitting diode, or the like. The user input unit 1607 includes at least one of a touch panel 16071 and other input devices 16072. The touch panel 16071 is also called a touch screen. The touch panel 16071 may include a touch detection device and a touch controller. Other input devices 16072 may include, but are not limited to, physical keyboards, function keys (such as volume control buttons, power buttons, etc.), trackballs, mice, and joysticks, which will not be described in detail here.

[0324] The memory 1609 can be used to store software programs and various data. The memory 1609 may primarily include a first storage area for storing programs or instructions and a second storage area for storing data. The first storage area may store the operating system, application programs or instructions required for at least one function (such as sound playback, image playback, etc.). Furthermore, the memory 1609 may include volatile memory or non-volatile memory, or both. The non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory can be random access memory (RAM), static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct memory bus RAM (DRRAM). The memory 1609 in this embodiment includes, but is not limited to, these and any other suitable types of memory.

[0325] Processor 1610 may include one or more processing units; optionally, processor 1610 integrates an application processor and a modem processor, wherein the application processor mainly handles operations involving the operating system, user interface, and applications, and the modem processor mainly handles wireless communication signals, such as a baseband processor. It is understood that the aforementioned modem processor may also not be integrated into processor 1610.

[0326] This application also provides a readable storage medium storing a program or instructions. When the program or instructions are executed by a processor, they implement the various processes of the above-described security assessment method embodiments and achieve the same technical effect. To avoid repetition, they will not be described again here.

[0327] The processor is the processor in the electronic device described in the above embodiments. The readable storage medium includes computer-readable storage media, such as computer read-only memory (ROM), random access memory (RAM), magnetic disk, or optical disk.

[0328] Optional, such as Figure 17 As shown, this application embodiment also provides a server 1700, including a processor 1701 and a memory 1702. The memory 1702 stores a program or instructions that can run on the processor 1701. When the program or instructions are executed by the processor 1701, they implement the various steps of the above-described application server-side business processing method embodiment, or implement the various steps of the above-described management server-side security information transmission method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0329] This application embodiment also provides a chip, which includes a processor and a communication interface. The communication interface and the processor are coupled. The processor is used to run programs or instructions to implement the various processes of the above-described security assessment method embodiment, or to implement the various processes of the above-described business processing method embodiment, or to implement the various processes of the above-described secure information transmission method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0330] It should be understood that the chip mentioned in the embodiments of this application may also be referred to as a system-on-a-chip, system chip, chip system, or system-on-a-chip, etc.

[0331] This application provides a computer program product stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the security assessment method embodiment described above, or to implement the various processes of the business processing method embodiment described above, or to implement the various processes of the secure information transmission method embodiment described above, and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0332] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element. Furthermore, it should be noted that the scope of the methods and apparatuses in the embodiments of this application is not limited to performing functions in the order shown or discussed, but may also include performing functions substantially simultaneously or in the reverse order, depending on the functions involved. For example, the described methods may be performed in a different order than described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

[0333] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a computer software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0334] The embodiments of this application have been described above with reference to the accompanying drawings. However, this application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.

Claims

1. A safety assessment method, characterized in that, The method includes: Upon receiving a security assessment request from an application server, the security coprocessor of the electronic device determines the target security assessment result based on first security information, wherein the first security information includes the security status information of the rich execution environment (REE) of the electronic device or the security assessment result of the REE. The security coprocessor of the electronic device uses the root key of the electronic device to decrypt the first ciphertext to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor encrypting the private key of the electronic device using the root key of the electronic device. The security coprocessor of the electronic device uses the private key of the electronic device to sign the target security assessment result, thereby obtaining the signature of the target security assessment result; The electronic device sends second security information to the application server, wherein the second security information includes the target security assessment result, the signature of the target security assessment result, and first digital certificate information, wherein the first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device; wherein the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

2. The method according to claim 1, characterized in that, The root key is stored in the one-time programmable OTP memory of the electronic device.

3. The method according to claim 1, characterized in that, The root key of the electronic device is generated by the security coprocessor.

4. The method according to claim 1, characterized in that, The public-private key pair of the electronic device is generated by the security coprocessor; The public-private key pair of the electronic device includes the private key of the electronic device and the public key corresponding to the private key of the electronic device.

5. The method according to claim 1, characterized in that, The first digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server; The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

6. The method according to any one of claims 1 to 5, characterized in that, Before the security coprocessor of the electronic device determines the target security assessment result based on the first security information, the method further includes: The electronic device acquires the target verification result of the electronic device, wherein the target verification result is the verification result obtained by the management server in verifying the security of the electronic device; The security coprocessor of the electronic device determines the target security assessment result based on the first security information, including: If the target verification result indicates that the electronic device is a secure device, the security coprocessor of the electronic device determines the target security assessment result based on the first security information.

7. The method according to claim 6, characterized in that, The method further includes: If the target verification result indicates that the electronic device is an insecure device, the electronic device sends a first indication message to the application server. The first indication message is used to indicate that the electronic device is an insecure device or that the security assessment of the electronic device has failed.

8. The method according to claim 6, characterized in that, The electronic device acquires the target verification result of the electronic device, including: The electronic device sends a verification request to the management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device; The electronic device receives the verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

9. The method according to claim 8, characterized in that, Before the electronic device sends a verification request to the management server, the method further includes: The electronic device queries whether there is a verification result for the electronic device that is still valid. If the electronic device contains a valid verification result, the electronic device will determine the valid verification result as the target verification result. Sending a verification request to the management server includes: If no valid verification result for the electronic device is found within the electronic device's internal storage, the electronic device sends a verification request to the management server.

10. The method according to claim 9, characterized in that, The security verification parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

11. The method according to any one of claims 1 to 5, characterized in that, The first security information also includes the security status information of the Trusted Execution Environment (TEE) of the electronic device or the security assessment results of the TEE.

12. The method according to claim 11, characterized in that, The first security information includes the security assessment results of the REE and the security status information of the TEE; The security coprocessor of the electronic device determines the target security assessment result based on the first security information, including: The security coprocessor of the electronic device performs a security assessment on the TEE based on the security status information of the TEE, and obtains the security assessment result of the TEE. The security coprocessor of the electronic device determines the target security assessment result based on the security assessment results of the TEE and the security assessment results of the REE.

13. The method according to claim 12, characterized in that, The security assessment result of the REE is the security assessment result obtained by the TEE based on the security status information of the REE.

14. A business processing method, characterized in that, The method includes: The application server sends a security assessment request to the electronic device, the security assessment request being used to request an assessment of the security of the electronic device; The application server receives second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the second security information, wherein the target service is a service provided by the application server to the electronic device.

15. The method according to claim 14, characterized in that, The application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the second security information, including: The application server verifies the digital certificate of the management server based on the public key in the digital certificate of the management server or the target digital certificate. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs. If the digital certificate of the management server is verified, the application server verifies the digital certificate of the electronic device based on the digital certificate of the management server. If the digital certificate of the electronic device is verified, the application server verifies the signature of the target security assessment result based on the digital certificate of the electronic device. If the signature of the target security assessment result is verified, the application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service based on the target security assessment result.

16. The method according to claim 15, characterized in that, The first digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server.

17. The method according to claim 15, characterized in that, Before the application server verifies the management server's digital certificate based on the first digital certificate, the method further includes: The application server determines the identifier of the management server's digital certificate based on the digital certificate of the electronic device; The application server obtains the digital certificate of the management server based on the identifier of the management server's digital certificate.

18. A method for secure information transmission, characterized in that, The method includes: The management server generates a digital certificate, wherein the digital certificate includes a digital certificate of the electronic device and a digital certificate of the management server. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs. The management server sends a second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device; During the business processing, the application server receives second security information from the electronic device. The second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

19. The method according to claim 18, characterized in that, The second digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server.

20. The method according to claim 18 or 19, characterized in that, The private key of the management server is stored in the hardware security module (HSM) of the management server.

21. The method according to claim 18 or 19, characterized in that, The method further includes: The management server receives a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device; The management server verifies the security of the electronic device based on the security verification parameters of the electronic device and obtains a verification result, wherein the verification result is used to indicate whether the electronic device is a secure device or an insecure device; The management server sends the verification result to the electronic device.

22. The method according to claim 21, characterized in that, The security verification parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

23. A safety assessment device, characterized in that, Applied to electronic devices, the device includes: The first determining module is configured to determine the target security assessment result based on first security information upon receiving a security assessment request sent by the application server, wherein the first security information includes the security status information of the rich execution environment (REE) of the electronic device or the security assessment result of the REE. The decryption module is used to decrypt the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor of the electronic device encrypting the private key of the electronic device using the root key of the electronic device. The signature module is used to sign the target security assessment result using the private key of the electronic device to obtain the signature of the target security assessment result; A first sending module is used to send second security information to the application server, wherein the second security information includes the target security assessment result, the signature of the target security assessment result, and first digital certificate information, wherein the first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device; wherein the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

24. The apparatus according to claim 23, characterized in that, The root key is stored in the one-time programmable OTP memory of the electronic device.

25. The apparatus according to claim 23, characterized in that, The root key of the electronic device is generated by the security coprocessor.

26. The apparatus according to claim 23, characterized in that, The public-private key pair of the electronic device is generated by the security coprocessor; The public-private key pair of the electronic device includes the private key of the electronic device and the public key corresponding to the private key of the electronic device.

27. The apparatus according to claim 23, characterized in that, The first digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server; The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

28. The apparatus according to any one of claims 23 to 27, characterized in that, The device further includes: The first acquisition module is used to acquire the target verification result of the electronic device before determining the target security assessment result based on the first security information, wherein the target verification result is the verification result obtained by the management server verifying the security of the electronic device; The first determining module is specifically used for: If the target verification result indicates that the electronic device is a secure device, the target security assessment result is determined based on the first security information.

29. The apparatus according to claim 28, characterized in that, The device further includes: The second sending module is used to send first indication information to the application server when the target verification result indicates that the electronic device is an insecure device. The first indication information is used to indicate that the electronic device is an insecure device or that the security assessment of the electronic device has failed.

30. The apparatus according to claim 28, characterized in that, The first acquisition module is specifically used for: Send a verification request to the management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device; Receive the verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

31. The apparatus according to claim 30, characterized in that, The device further includes: The query module is used to query whether there is a valid verification result for the electronic device in the electronic device before sending the verification request to the management server; The second determining module is used to determine the valid verification result of the electronic device as the target verification result when there is a valid verification result of the electronic device in the electronic device. The first acquisition module is specifically used for: If no valid verification result for the electronic device is found within the electronic device, a verification request is sent to the management server.

32. The apparatus according to claim 31, characterized in that, The security verification parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

33. The apparatus according to any one of claims 23 to 27, characterized in that, The first security information also includes the security status information of the Trusted Execution Environment (TEE) of the electronic device or the security assessment results of the TEE.

34. The apparatus according to claim 33, characterized in that, The first security information includes the security assessment results of the REE and the security status information of the TEE; The first determining module is specifically used for: Based on the security status information of the TEE, a security assessment of the TEE is performed to obtain the security assessment result of the TEE; The target security assessment result is determined based on the security assessment results of the TEE and the security assessment results of the REE.

35. The apparatus according to claim 34, characterized in that, The security assessment result of the REE is the security assessment result obtained by the TEE based on the security status information of the REE.

36. A business processing apparatus, characterized in that, The device, used in an application server, includes: The third sending module is used to send a security assessment request to the electronic device, the security assessment request being used to request an assessment of the security of the electronic device; A first receiving module is configured to receive second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The third determining module is used to determine, based on the second security information, whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service, wherein the target service is a service provided by the application server to the electronic device.

37. The apparatus according to claim 36, characterized in that, The third determining module is specifically used for: The digital certificate of the management server is verified based on the public key in the digital certificate of the management server or the target digital certificate. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is the digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs. If the digital certificate of the management server is verified, the digital certificate of the electronic device is verified based on the digital certificate of the management server; If the digital certificate of the electronic device is verified, the signature of the target security assessment result is verified based on the digital certificate of the electronic device. If the signature of the target security assessment result is verified, the system determines whether the electronic device is allowed to access the target service or not.

38. The apparatus according to claim 37, characterized in that, The first digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server.

39. The apparatus according to claim 37, characterized in that, The device further includes: The fourth determining module is used to determine the identifier of the digital certificate of the management server based on the digital certificate of the electronic device before verifying the digital certificate of the management server based on the first digital certificate; The second acquisition module is used to acquire the digital certificate of the management server based on the identifier of the digital certificate of the management server.

40. A secure information transmission device, characterized in that, The device, used for managing servers, includes: A generation module is used to generate digital certificates, wherein the digital certificates include digital certificates of electronic devices and digital certificates of management servers. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server. The digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs. The fourth sending module is used to send second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device; During the business processing, the application server receives second security information from the electronic device. The second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information. The target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device. The first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device. The digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server.

41. The apparatus according to claim 40, characterized in that, The second digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server.

42. The apparatus according to claim 40 or 41, characterized in that, The private key of the management server is stored in the hardware security module (HSM) of the management server.

43. The apparatus according to claim 40 or 41, characterized in that, The device further includes: The second receiving module is used to receive a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device; The verification module is used to verify the security of the electronic device based on the security verification-related parameters of the electronic device and obtain a verification result, wherein the verification result is used to indicate whether the electronic device is a secure device or an insecure device; The fifth sending module is used to send the verification result to the electronic device.

44. The apparatus according to claim 43, characterized in that, The security verification parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

45. An electronic device, characterized in that, It includes a processor and a memory, the memory storing a program or instructions that can run on the processor, the program or instructions being executed by the processor to implement the steps of the security assessment method as described in any one of claims 1-13.

46. ​​An application server, characterized in that, It includes a processor and a memory, the memory storing a program or instructions that can run on the processor, the program or instructions being executed by the processor to implement the steps of the business processing method as described in any one of claims 14-17.

47. A management server, characterized in that, It includes a processor and a memory, the memory storing a program or instructions that can run on the processor, the program or instructions being executed by the processor to implement the steps of the secure information transmission method as described in any one of claims 18-22.

48. A readable storage medium, characterized in that, The readable storage medium stores a program or instructions that, when executed by a processor, implement the steps of the security assessment method as described in any one of claims 1-13, or the steps of the business processing method as described in any one of claims 14-17, or the steps of the secure information transmission method as described in any one of claims 18-22.

Images