Systems, methods, apparatuses, processors, and storage media for enabling trusted transmission and reverse authorization processing of multi-party interactive data.

Abstract

This invention relates to a system for trusted transmission and reverse authorization processing of multi-party interactive data. The system includes a data sender that configures a security policy list based on the data receiver's access request and assigns a temporary key with an attached permission tag to the data receiver. The data receiver configures the data sender's hardware and software environment as a trusted execution environment. The data receiver and data sender jointly construct a trusted transmission channel based on the feasible execution environment and share a communication key. This invention also relates to a method, apparatus, processor, and computer-readable storage medium for trusted transmission and reverse authorization processing of multi-party interactive data. By employing the system, method, apparatus, processor, and computer-readable storage medium of this invention for trusted transmission and reverse authorization processing of multi-party interactive data, trusted transmission and reverse authorization of multi-party interactive data are achieved, ensuring trusted data transmission at the system security level and refining data access and usage permissions under the reverse authorization mode.

Description

Technical Field

[0001] This invention relates to the field of Internet communication, and more particularly to the field of secure transmission methods for multi-party interactive data. Specifically, it refers to a system, method, apparatus, processor, and computer-readable storage medium thereof for enabling trusted transmission and reverse authorization processing of multi-party interactive data. Background Technology

[0002] Currently, the primary method for secure multi-party data transmission is TLS (Transport Layer Security). While TLS provides security and data integrity guarantees for internet communication, it cannot control the access permissions of data users. Traditional access control typically involves data users requesting access from data providers, which presents management challenges. In the reverse authorization model, data providers can precisely define that their data can only be used by specific authorized users, simplifying management and making it more suitable for scenarios with high security requirements. Reverse authorization can be implemented using technologies such as RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control). However, some drawbacks still exist in secure multi-party data transmission and access control. Regarding secure data transmission, in TLS, when using the ECDH (Elliptic Curve Diffie-Hellman) key exchange method, the generated keys are typically stored in plaintext in memory. If the operating system is attacked or has security vulnerabilities, these keys stored in memory can be obtained by malware or attackers. Meanwhile, in reverse authorization mode, RBAC and ABCA can restrict data to be used only by specific authorized users, but cannot restrict data to be used only for specific analytical purposes, prohibit data copying or external transmission, or other granular applications.

[0003] Chinese patent application number 202210823034.5 discloses a remote authentication method, apparatus, device, storage medium, and program product. This patented method includes providing users with multiple key establishment modes: key transmission mode, key negotiation mode, and public key distribution mode. In the key negotiation mode, the patent first generates a master key based on a first temporary public key and a second temporary public key, and then generates a session key based on the master key and a first cryptographic hash. Although this patent achieves system-level secure key negotiation generation through SGX, it does not consider data access permission issues. Chinese patent application number 202211733513.4 discloses a method and management apparatus for processing data in a trusted computing platform. This patent primarily ensures data security by encrypting data using a first user data key and a TEE key, rather than achieving secure data transmission through key negotiation. Furthermore, this patent does not implement refined reverse licensing. Chinese patent application number 202010251319.7 discloses a method and system for securely extending key service resources based on a TEE (Trusted Execution Environment). This patent primarily extends the cryptographic service framework by utilizing the secure, isolated computing environment provided by the TEE and interacting with the operating system kernel. This enables the cryptographic service framework to proactively detect and securely load system hardware cryptographic service resources. However, it does not consider data access permission issues within a trusted execution environment. Therefore, achieving trusted transmission and reverse authorization of multi-party interactive data, ensuring trusted data transmission at the system security level, and refining data access and usage permissions under a granular reverse authorization mode are problems that need to be solved in this field. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of the prior art and provide a system, method, apparatus, processor and computer-readable storage medium for achieving trusted transmission and reverse authorization processing of multi-party interactive data, which meets the requirements of high data reliability, simple operation and wide applicability.

[0005] To achieve the above objectives, the present invention provides a system, method, apparatus, processor, and computer-readable storage medium for trusted transmission and reverse authorization processing of multi-party interactive data, as follows:

[0006] The system for trusted transmission and reverse authorization processing of multi-party interactive data is characterized by the following features:

[0007] The data sender configures a list of security policies based on the data receiver's access request and assigns a temporary key with an attached permission label to the data receiver;

[0008] The data receiver, based on a remote authentication mechanism, ensures that the hardware and software environment of the data sender is a trusted execution environment. The data receiver and the data sender jointly construct a trusted transmission channel based on the feasible execution environment and share a communication key. After being authenticated, the data receiver operates the data in compliance with the list and using a temporary key.

[0009] Preferably, the data sender includes:

[0010] The data transmission key management module is used to generate and store symmetric encryption keys, temporary keys, and communication keys, and to use the keys to perform data encryption and decryption operations.

[0011] The remote authentication module is connected to the data receiver and is used to provide remote authentication docking services, generate a proof report and send it to the receiver for verification;

[0012] A trusted transmission module, connected to the data receiver and the data transmission key management module, is used to confirm the TLS version used and the selected encryption suite, and to share the same communication key within the data sender using the ECDH key exchange algorithm.

[0013] The data encryption module is connected to the data transmission key management module and is used to generate, store and use encryption keys within the data sender, and encrypt data using the encryption algorithm within the data sender, and store the encrypted data inside the data sender.

[0014] The reverse authorization module is connected to the data receiver and data transmission key management module. It is used to customize the receiver's security policy list and generate temporary keys and identity verification tokens with permission tags for the receiver.

[0015] The Trusted Execution Module is used to establish a trusted execution environment, providing a secure execution environment isolated from the outside world.

[0016] Preferably, the remote authentication module provides remote authentication integration services, generates a verification report and sends it to the data receiver for verification; after the data sender is verified to be trustworthy, the same communication key is shared within the data sender using the ECDH key exchange algorithm.

[0017] Preferably, the data sender customizes a security policy list in a trusted execution environment to define the scope of data accessibility; dynamically authorizes the data receiver by generating a temporary key and an identity verification token for the data receiver, with the temporary key attached to a specific permission label, and sends the authorization information to the data receiver through a trusted channel; and adjusts the security policy list and distributes a new temporary key to the data receiver within the data sender based on business needs or the legality of the access behavior.

[0018] Preferably, the authorization information includes a temporary key, a token, and a permission file; the security policy list includes the scope of data accessibility.

[0019] Preferably, the data receiver includes:

[0020] The data receiving key management module is used for secure storage and use of symmetric encryption keys, temporary keys, and communication keys.

[0021] The remote authentication module is connected to the data sender and is used to send a remote authentication request to the data sender, query the hardware chip certificate verification report from a trusted third party, and establish a trusted transmission channel if the verification is successful.

[0022] The trusted transmission module, connected to the data sender and data receiver key management module, is used to confirm the TLS version used and the selected encryption suite, obtain the communication key, and build a trusted transmission channel.

[0023] The data decryption module, connected to the data receiving key management module, is used to decrypt the ciphertext data stream using the communication key to obtain plaintext data.

[0024] Preferably, the data receiver initiates a remote authentication request, the data sender calls the ATTESTATION command, and uses the chip key to sign the authentication report, which is then sent to the data receiver. The data receiver uses the chip ID to query the chip certificate from the security processor manufacturer and uses the chip certificate to verify the authentication report. After completing remote authentication, the data receiver confirms that the data sender's environment is trustworthy, and uses the ECDH key protocol within the data sender to generate and share a communication key with the data receiver, thus completing the construction of a trusted transmission channel.

[0025] The method for trusted transmission and reverse authorization processing of multi-party interactive data using the aforementioned system is characterized by the following steps:

[0026] (1) Establish a trusted environment at the data sender;

[0027] (2) The data sender randomly generates a symmetric encryption key and uses it to encrypt and store data in the database;

[0028] (3) The data receiver initiates an authentication request, the data sender calls a command, uses the chip key to sign the authentication report, and sends it to the data receiver, thus building a trusted transmission based on remote authentication;

[0029] (4) The data receiver sends a negotiated reverse authorization permission scope to the data sender;

[0030] (5) The data sender defines a list of data access policies in the trusted execution environment to specify the scope of data accessibility;

[0031] (6) Both parties negotiate the scope of reverse authorization permissions, and the data sender dynamically authorizes the data receiver.

[0032] (7) The data sender securely transmits the authorization information to the data receiver;

[0033] (8) The data recipient requests access to the data;

[0034] (9) Perform authorization authentication based on the token and temporary key in the data receiver's access request;

[0035] (10) The data sender performs data operations based on the security policy list;

[0036] (11) The data sender transmits the restricted data stream to the data receiver through a trusted transmission channel;

[0037] (12) The data receiver uses the communication key to decrypt the ciphertext data stream and obtain the plaintext data;

[0038] (13) The data sender adjusts the data access policy list and generates a new temporary key for the data receiver.

[0039] Preferably, step (3) specifically includes the following steps:

[0040] (3.1) The data receiver initiates an authentication request, the data sender calls the ATTESTATION command, and uses the chip key to sign the authentication report and sends it to the data receiver;

[0041] (3.2) The data receiver uses the chip ID to query the chip certificate from the security processor manufacturer and uses the chip certificate to verify the certification report;

[0042] (3.3) After the data receiver completes remote authentication, it confirms that the data sender's environment is trustworthy. The data sender uses the ECDH key protocol to generate and share a communication key with the data receiver, and the trusted transmission channel is completed.

[0043] Preferably, step (6) specifically includes the following steps:

[0044] Both parties negotiate the scope of reverse authorization permissions. The data sender dynamically authorizes the data receiver based on the data sender's authorization, and generates a temporary key and identity verification token for the data receiver. The temporary key is accompanied by a specific permission label.

[0045] Preferably, step (7) specifically includes the following steps:

[0046] The data sender calculates the hash value of the permission file using the national cryptographic SM3 algorithm and digitally signs the hash value and the permission file.

[0047] The data sender transmits authorization information and signature to the data receiver through a trusted transmission channel, and the data receiver needs to verify the authorization file.

[0048] Preferably, step (9) specifically includes the following steps:

[0049] Access authentication is performed based on the token and temporary key in the data recipient's access request. The data sender verifies the legitimacy of the data recipient's identity using the token. If the identity authentication is successful, the sender verifies whether the permission label attached to the temporary key is consistent with the security policy configuration list.

[0050] Preferably, step (10) specifically includes the following steps:

[0051] If the permission label matches the security policy configuration list, the data sender determines the range of data required by the data receiver based on the temporary key and the security policy list, and performs data operations based on the security policy list.

[0052] The apparatus for enabling trusted transmission and reverse authorization processing of multi-party interactive data is characterized in that the apparatus comprises:

[0053] A processor is configured to execute computer-executable instructions;

[0054] The memory stores one or more computer-executable instructions, which, when executed by the processor, implement the steps of the method described above for trusted transmission and reverse authorization processing of multi-party interactive data.

[0055] The processor used to implement trusted transmission and reverse authorization processing of multi-party interactive data is characterized in that the processor is configured to execute computer-executable instructions, which, when executed by the processor, implement the various steps of the method for implementing trusted transmission and reverse authorization processing of multi-party interactive data.

[0056] The computer-readable storage medium is characterized in that it stores a computer program thereon, which can be executed by a processor to implement the steps of the method described above for trusted transmission and reverse authorization processing of multi-party interactive data.

[0057] The present invention employs a system, method, apparatus, processor, and computer-readable storage medium thereof for trusted transmission and reverse authorization of multi-party interactive data, thereby enabling trusted transmission and reverse authorization of multi-party interactive data, ensuring trusted data transmission at the system security level, and refining data access and usage permissions under the reverse authorization mode. Attached Figure Description

[0058] Figure 1 This is a schematic diagram of the system for achieving trusted transmission and reverse authorization processing of multi-party interactive data according to the present invention.

[0059] Figure 2 The flowchart illustrates the method for trusted transmission and reverse authorization processing of multi-party interactive data according to the present invention. Detailed Implementation

[0060] To more clearly describe the technical content of the present invention, the following description is provided in conjunction with specific embodiments.

[0061] The system of the present invention for trusted transmission and reverse authorization processing of multi-party interactive data includes:

[0062] The data sender configures a list of security policies based on the data receiver's access request and assigns a temporary key with an attached permission label to the data receiver;

[0063] The data receiver, based on a remote authentication mechanism, ensures that the hardware and software environment of the data sender is a trusted execution environment. The data receiver and the data sender jointly construct a trusted transmission channel based on the feasible execution environment and share a communication key. After being authenticated, the data receiver operates the data in compliance with the list and using a temporary key.

[0064] In a preferred embodiment of the present invention, the data sender includes:

[0065] The data transmission key management module is used to generate and store symmetric encryption keys, temporary keys, and communication keys, and to use the keys to perform data encryption and decryption operations.

[0066] The remote authentication module is connected to the data receiver and is used to provide remote authentication docking services, generate a proof report and send it to the receiver for verification;

[0067] A trusted transmission module, connected to the data receiver and the data transmission key management module, is used to confirm the TLS version used and the selected encryption suite, and to share the same communication key within the data sender using the ECDH key exchange algorithm.

[0068] The data encryption module is connected to the data transmission key management module and is used to generate, store and use encryption keys within the data sender, and encrypt data using the encryption algorithm within the data sender, and store the encrypted data inside the data sender.

[0069] The reverse authorization module is connected to the data receiver and data transmission key management module. It is used to customize the receiver's security policy list and generate temporary keys and identity verification tokens with permission tags for the receiver.

[0070] The Trusted Execution Module is used to establish a trusted execution environment, providing a secure execution environment isolated from the outside world.

[0071] In a preferred embodiment of the present invention, the remote authentication module provides remote authentication docking services, generates a proof report and sends it to the data receiver for verification; after the data sender is verified to be trustworthy, the same communication key is shared within the data sender through the ECDH key exchange algorithm.

[0072] In a preferred embodiment of the present invention, the data sender customizes a security policy list in a trusted execution environment to define the scope of data accessibility; dynamically authorizes the data receiver by generating a temporary key and an identity verification token for the data receiver, with the temporary key attached to a specific permission tag, and sends the authorization information to the data receiver through a trusted channel; and adjusts the security policy list and distributes a new temporary key to the data receiver within the data sender based on business needs or the legality of the access behavior.

[0073] In a preferred embodiment of the present invention, the authorization information includes a temporary key, a token, and a permission file; the security policy list includes the data accessibility scope.

[0074] In a preferred embodiment of the present invention, the data receiver includes:

[0075] The data receiving key management module is used for secure storage and use of symmetric encryption keys, temporary keys, and communication keys.

[0076] The remote authentication module is connected to the data sender and is used to send a remote authentication request to the data sender, query the hardware chip certificate verification report from a trusted third party, and establish a trusted transmission channel if the verification is successful.

[0077] The trusted transmission module, connected to the data sender and data receiver key management module, is used to confirm the TLS version used and the selected encryption suite, obtain the communication key, and build a trusted transmission channel.

[0078] The data decryption module, connected to the data receiving key management module, is used to decrypt the ciphertext data stream using the communication key to obtain plaintext data.

[0079] In a preferred embodiment of the present invention, the data receiver initiates a remote authentication request, the data sender calls the ATTESTATION command, and uses the chip key to sign the authentication report and sends it to the data receiver; the data receiver uses the chip ID to query the chip certificate from the security processor manufacturer, and uses the chip certificate to verify the authentication report; after the data receiver completes remote authentication, it confirms that the data sender's environment is trustworthy, and uses the ECDH key protocol within the data sender to generate and share a communication key with the data receiver, thus completing the construction of a trusted transmission channel.

[0080] The present invention provides a method for trusted transmission and reverse authorization processing of multi-party interactive data using the aforementioned system, comprising the following steps:

[0081] (1) Establish a trusted environment at the data sender;

[0082] (2) The data sender randomly generates a symmetric encryption key and uses it to encrypt and store data in the database;

[0083] (3) The data receiver initiates an authentication request, the data sender calls a command, uses the chip key to sign the authentication report, and sends it to the data receiver, thus building a trusted transmission based on remote authentication;

[0084] (4) The data receiver sends a negotiated reverse authorization permission scope to the data sender;

[0085] (5) The data sender defines a list of data access policies in the trusted execution environment to specify the scope of data accessibility;

[0086] (6) Both parties negotiate the scope of reverse authorization permissions, and the data sender dynamically authorizes the data receiver.

[0087] (7) The data sender securely transmits the authorization information to the data receiver;

[0088] (8) The data recipient requests access to the data;

[0089] (9) Perform authorization authentication based on the token and temporary key in the data receiver's access request;

[0090] (10) The data sender performs data operations based on the security policy list;

[0091] (11) The data sender transmits the restricted data stream to the data receiver through a trusted transmission channel;

[0092] (12) The data receiver uses the communication key to decrypt the ciphertext data stream and obtain the plaintext data;

[0093] (13) The data sender adjusts the data access policy list and generates a new temporary key for the data receiver.

[0094] In a preferred embodiment of the present invention, step (3) specifically includes the following steps:

[0095] (3.1) The data receiver initiates an authentication request, the data sender calls the ATTESTATION command, and uses the chip key to sign the authentication report and sends it to the data receiver;

[0096] (3.2) The data receiver uses the chip ID to query the chip certificate from the security processor manufacturer and uses the chip certificate to verify the certification report;

[0097] (3.3) After the data receiver completes remote authentication, it confirms that the data sender's environment is trustworthy. The data sender uses the ECDH key protocol to generate and share a communication key with the data receiver, and the trusted transmission channel is completed.

[0098] In a preferred embodiment of the present invention, step (6) specifically includes the following steps:

[0099] Both parties negotiate the scope of reverse authorization permissions. The data sender dynamically authorizes the data receiver, generating a temporary key and identity verification token for the data receiver. The temporary key is accompanied by a specific permission label.

[0100] In a preferred embodiment of the present invention, step (7) specifically includes the following steps:

[0101] The data sender calculates the hash value of the permission file using the national cryptographic SM3 algorithm and digitally signs the hash value and the permission file.

[0102] The data sender transmits authorization information and signature to the data receiver through a trusted transmission channel, and the data receiver needs to verify the authorization file.

[0103] In a preferred embodiment of the present invention, step (9) specifically includes the following steps:

[0104] Access authentication is performed based on the token and temporary key in the data recipient's access request. The data sender verifies the legitimacy of the data recipient's identity using the token. If the identity authentication is successful, the sender verifies whether the permission label attached to the temporary key is consistent with the security policy configuration list.

[0105] In a preferred embodiment of the present invention, step (10) specifically includes the following steps:

[0106] If the permission label matches the security policy configuration list, the data sender determines the range of data required by the data receiver based on the temporary key and the security policy list, and performs data operations based on the security policy list.

[0107] The apparatus of the present invention for implementing trusted transmission and reverse authorization processing of multi-party interactive data, wherein the apparatus includes:

[0108] A processor is configured to execute computer-executable instructions;

[0109] The memory stores one or more computer-executable instructions, which, when executed by the processor, implement the steps of the method described above for trusted transmission and reverse authorization processing of multi-party interactive data.

[0110] The present invention provides a processor for implementing trusted transmission and reverse authorization processing of multi-party interactive data, wherein the processor is configured to execute computer-executable instructions, which, when executed by the processor, implement the various steps of the method for implementing trusted transmission and reverse authorization processing of multi-party interactive data.

[0111] The computer-readable storage medium of the present invention stores a computer program that can be executed by a processor to implement the various steps of the method for trusted transmission and reverse authorization processing of multi-party interactive data described above.

[0112] In a specific embodiment of the present invention, a trusted transmission and reverse authorization method for multi-party interactive data is proposed to achieve trusted transmission and reverse authorization of multi-party interactive data, ensure trusted data transmission at the system security level, and refine data access and usage permissions under the reverse authorization mode.

[0113] A trusted transmission and reverse authorization method for multi-party interactive data comprises a trusted transmission and reverse authorization method based on a Trusted Execution Environment (TEE). TEE is the foundational technology of the entire invention. TEE, short for Trusted Execution Environment, refers to an isolated and secure area established within the main processor of a computing device. The primary purpose of TEE design is to provide an independent secure area at both the hardware and firmware levels to protect sensitive data and code from interference and attacks by untrusted software on the same device.

[0114] like Figure 1 As shown, Figure 1 This diagram illustrates a module schematic for trusted transmission and reverse authorization of multi-party interactive data according to the present invention. The data sender constructs a Trusted Execution Environment (TEE), which includes modules for key management, remote authentication, trusted transmission, data encryption, access control, and feasible execution. The data receiver includes modules for key management, remote authentication, and trusted transmission.

[0115] The following section provides a detailed explanation of each module in the data sender.

[0116] Key Management: Generates local key pairs, which can be updated periodically. Generates and stores symmetric encryption keys, temporary keys, and communication keys, and uses these keys to perform data encryption and decryption operations.

[0117] Remote authentication: Provides remote authentication integration services, generates a verification report and sends it to the data recipient for verification. The purpose is to ensure that the data recipient is confident that the software components within the data sender are running in a trusted and isolated environment.

[0118] Trusted transmission: Verify the TLS version used and the selected encryption suite, and share the same communication key within the data sender using the ECDH key exchange algorithm.

[0119] Data encryption: The encryption key is generated, stored and used within the data sender, and the data is encrypted using the encryption algorithm within the data sender. The encrypted data is then stored within the data sender.

[0120] Reverse Authorization: Customize the data recipient's security policy list and generate temporary keys and identity tokens with permission tags for the data recipient. This allows for fine-grained control over the data recipient's data access and usage permissions under the reverse authorization mode, and the data recipient's access permissions can be updated or revoked according to business needs.

[0121] Trusted execution: Establish a trusted execution environment, providing a secure execution environment isolated from the outside world. During the protection period, code and data will not be leaked or maliciously tampered with, ensuring that all operations can be executed in a trustworthy manner.

[0122] This invention applies to the data sender, including:

[0123] Establish a trusted environment. The data sender deploys one or more Trusted Applications (TAs) on a device with hardware that supports TEE functionality. The TA is responsible for processing sensitive data and performing secure operations in an isolated and protected memory area, and for sending trusted verification reports to the data receiver during remote authentication.

[0124] Data is encrypted and stored. The data sender generates, stores, and uses encryption keys within its own organization, and encrypts the data using its own encryption algorithm. The encrypted data is then stored within the data sender's organization, and only the sender can decrypt and access it.

[0125] Co-construction of a trusted transmission channel. The data sender provides remote authentication and connection services, generates a verification report, and sends it to the data receiver for verification. The purpose is to ensure that the data receiver is confident that the software components within the data sender are executing in a trusted and isolated environment. After the data sender is verified as trustworthy, the same communication key is shared within the data sender using the ECDH key exchange algorithm. The key is generated, stored, and used entirely within the data sender.

[0126] Security policy list configuration. The data sender customizes a list of data access policies in the trusted execution environment, specifying the scope of data access, such as specific records or fields, the data access methods, such as read, compute, non-copyable, and data access time restrictions.

[0127] Dynamic authorization and secure transmission of authorization information. Both parties negotiate the scope of reverse authorization permissions. The data sender dynamically authorizes the data receiver, generating a temporary key and token. The temporary key carries specific permission tags, such as non-copyable, one-time use, and access to a specific data range. The authorization information, including the temporary key, token, and permission file, is sent to the data receiver through a trusted channel.

[0128] Access control and data manipulation. The data sender authenticates the data receiver's identity and access permissions based on the data receiver's token and temporary key. The data receiver can perform data access and manipulation within the scope specified in the security policy list.

[0129] Permission updates and revocations. Based on business needs or the legitimacy of access behavior, the data sender can adjust the security policy list at any time and distribute new temporary keys to the data receiver. The security policy list includes the scope of data access, such as specific records or fields, the methods of data access, such as read, compute, and non-copyable, as well as time restrictions on data access.

[0130] The data receiver's modules are as follows:

[0131] Key management: Generates local key pairs that can be updated periodically. Securely stores and uses symmetric encryption keys, temporary keys, and communication keys.

[0132] Remote authentication: Sends a remote authentication request to the data sender to ensure that the software components within the data sender are running in a trusted and isolated environment.

[0133] Trusted Transport: Confirm the TLS version and selected encryption suite used, obtain the communication key, and establish a trusted transport channel.

[0134] Data decryption: Use the communication key to decrypt the ciphertext data stream to obtain the plaintext data.

[0135] This invention applies to the data receiver, including:

[0136] Remote authentication and trusted transmission channel construction. The data receiver sends an authentication request, and the data sender device sends a trusted authentication report to the data receiver through a remote authentication mechanism. The data receiver queries a trusted third party to verify the authentication report using the TEE hardware chip certificate; if the verification is successful, a trusted transmission channel is established.

[0137] Access Request and Restricted Data Stream Transmission. The data receiver sends an access request containing its identity token and a temporary key with an accompanying authorization tag. Based on the identity token and authorization tag, the data receiver can only perform legitimate data access actions, and the data receiver obtains a restricted data stream.

[0138] The data receiver initiates a remote authentication request. The data sender calls the ATTESTATION command and signs the authentication report using the chip key, sending it to the data receiver. The data receiver uses the chip ID to query the chip certificate from the security processor manufacturer and finally uses the chip certificate to verify the authentication report. After completing remote authentication, the data receiver confirms that the data sender's environment is trustworthy. The data sender then uses the ECDH key protocol to generate and share a communication key with the data receiver, thus completing the construction of the trusted transmission channel.

[0139] The data receiver ensures that the sender's hardware and software environment is a trusted execution environment based on a remote authentication mechanism. The data receiver and the data sender jointly build a trusted transmission channel based on the trusted execution environment and share a communication key. The key generation, storage and use are all carried out in the trusted execution environment.

[0140] like Figure 2 As shown, Figure 2 The flowchart illustrates a trusted transmission and reverse authorization method for multi-party interactive data according to the present invention. The specific steps are as follows:

[0141] 1. Establish a trusted environment. Deploy one or more trusted applications (TAs) on hardware devices that support TEE functionality at the data sender's location to build a trusted execution environment for secure data transmission and reverse authorization.

[0142] 2. Encrypted Data Storage. The data sender randomly generates a symmetric encryption key, `key`, using the Chinese national standard SM4 algorithm. The encryption process can be represented as SM4(data, key) → ct, where `data` is the original data and `ct` is the ciphertext.

[0143] The encrypted data is stored inside the data sender, and only the sender can decrypt and access it.

[0144] 3. Establishing Trusted Transmission Based on Remote Authentication. The data receiver initiates an authentication request. The data sender calls the ATTESTATION command and signs the authentication report using the chip key, sending it to the data receiver. The data receiver uses the chip ID to query the security processor vendor for the chip certificate and finally uses the chip certificate to verify the authentication report. After completing remote authentication, the data receiver confirms the trustworthiness of the data sender's environment. Within the data sender, a communication key is generated using the ECDH key protocol and shared with the data receiver, thus completing the establishment of the trusted transmission channel.

[0145] 4. Negotiate the scope of reverse authorization permissions. The data receiver sends a negotiated reverse authorization permission scope to the data sender, specifying the purpose of data use, data access requirements, and the scope of data operations.

[0146] 5. Security Policy List Configuration. The data sender customizes a list of data access policies within the trusted execution environment, specifying the scope of data access, such as specific records or fields, the methods of data access, such as reading, computation, and non-copying, as well as data access time limits.

[0147] 6. Dynamic Authorization. Both parties negotiate the scope of reverse authorization permissions. The data sender dynamically authorizes the data receiver based on the TEE, generating a temporary key and identity verification token for the data receiver. The temporary key is accompanied by specific permission tags, such as non-copyable, one-time use, and access to a specific data range.

[0148] 7. Secure Transmission of Authorization Information. The authorization information includes a temporary key, a token, and an authorization file. The data sender calculates the hash value of the authorization file using the national cryptographic algorithm SM3 and digitally signs the hash value and the authorization file. The data sender transmits the authorization information and signature to the data receiver through a trusted transmission channel. The data receiver must verify the authorization file.

[0149] 8. Access Request. The data recipient requests access to the data, and the request includes a token and a temporary key with an accompanying authorization tag.

[0150] 9. Authentication. Authentication is performed based on the token and temporary key in the data recipient's access request. The data sender first verifies the legitimacy of the data recipient's identity using the token. If the identity authentication is successful, the sender verifies whether the permission label attached to the temporary key matches the security policy configuration list.

[0151] 10. Data Operations. If the permission label matches the security policy configuration list, the data sender can determine the data range required by the data receiver based on the temporary key and the security policy list, and perform data operations based on the security policy list.

[0152] 11. Restricted Data Stream Transmission. The data sender transmits a restricted data stream to the data receiver through a trusted transmission channel.

[0153] 12. Data Decryption. The data receiver uses the communication key to decrypt the ciphertext data stream to obtain the plaintext data.

[0154] 13. Permission Update and Revocation. Based on business needs or the legality of access behavior, the data sender can adjust the data access policy list at any time and generate a new temporary key for the data receiver within the data sender.

[0155] This application discloses a trusted transmission and reverse authorization method for multi-party interactive data. The data receiver ensures the data sender's hardware and software environment is a trusted execution environment based on a remote authentication mechanism. Both parties jointly construct a trusted transmission channel based on a TEE (Transmission over Environment), sharing the same communication key within the TEE using the ECDH key exchange algorithm. Key generation, storage, and use before encrypted data transmission are all performed within the TEE, preventing the key from being obtained by the operating system or other untrusted applications. The data encryption process also executes within the TEE, ensuring that the key and plaintext data are processed only in a hardware-protected environment, guaranteeing trusted data transmission at the system security level. The data sender customizes a security policy list based on the TEE. This list details the scope of data operations authorized by the data receiver, including executable and restricted operations, such as data access permissions, data processing methods, and data usage purposes. It also assigns a temporary key with an attached permission label and an identity verification token to the data receiver. Based on the data security policy list and the temporary key, only authenticated and authorized data receivers are allowed to decrypt the data and use it compliantly under the security policy list, thus fine-tuning data access and usage permissions in the reverse authorization mode.

[0156] For the specific implementation scheme of this embodiment, please refer to the relevant descriptions in the above embodiments, which will not be repeated here.

[0157] It is understood that the same or similar parts in the above embodiments can be referred to each other, and the contents not described in detail in some embodiments can be referred to the same or similar contents in other embodiments.

[0158] It should be noted that in the description of this invention, the terms "first," "second," etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance. Furthermore, in the description of this invention, unless otherwise stated, "a plurality of" means at least two.

[0159] Any process or method description in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process, and the scope of the preferred embodiments of the invention includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as will be understood by those skilled in the art to which embodiments of the invention pertain.

[0160] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution device. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0161] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The corresponding program can be stored in a computer-readable storage medium. When the program is executed, it includes one or a combination of the steps of the method embodiments.

[0162] Furthermore, the functional units in the various embodiments of the present invention can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0163] The storage media mentioned above can be read-only memory, disk, or optical disk, etc.

[0164] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0165] The present invention employs a system, method, apparatus, processor, and computer-readable storage medium thereof for trusted transmission and reverse authorization of multi-party interactive data, thereby enabling trusted transmission and reverse authorization of multi-party interactive data, ensuring trusted data transmission at the system security level, and refining data access and usage permissions under the reverse authorization mode.

[0166] In this specification, the invention has been described with reference to specific embodiments thereof. However, it will be apparent that various modifications and variations can be made without departing from the spirit and scope of the invention. Therefore, the specification and drawings should be considered illustrative rather than restrictive.

Claims

1. A system for implementing trusted transmission and reverse authorization processing for multi-party interaction data, characterized in that, The system comprises: The data sender configures a security policy list based on the data receiver's access request and assigns a temporary key with a permission tag to the data receiver; The data receiver makes the data sender's hardware and software environment a trusted execution environment based on a remote authentication mechanism, and the data receiver and the data sender jointly build a trusted transmission channel based on the trusted execution environment and share a communication key; the data receiver operates data in accordance with the list and using the temporary key after being authenticated; The data sender comprises: A data sending key management module for generating and storing symmetric encryption keys, temporary keys and communication keys, and performing data encryption and decryption operations using the keys; A remote authentication module connected to the data receiver for providing remote authentication docking services, generating a proof report and sending it to the receiver for verification; A trusted transmission module connected to the data receiver and the data sending key management module for confirming the TLS version used and the encryption suite selected, and sharing the same communication key in the data sender through the ECDH key exchange algorithm; A data encryption module connected to the data sending key management module for performing encryption key generation, storage and use in the data sender, and encrypting data using the encryption algorithm in the data sender, and storing the encrypted data in the data sender; A reverse authorization module connected to the data receiver and the data sending key management module for customizing the receiver's security policy list and generating a temporary key with a permission tag and an identity proof token for the receiver; A trusted execution module for establishing a trusted execution environment and providing a secure execution environment isolated from the outside world; The data sender customizes the security policy list in the trusted execution environment and specifies the data accessible range; dynamically authorizes the data receiver, generates a temporary key and an identity proof token for the data receiver, the temporary key is attached with a specific permission tag, and the authorization information is sent to the data receiver through the trusted channel; according to the business demand or access behavior legality judgment, the data sender adjusts the security policy list and distributes a new temporary key for the data receiver in the data sender; The authorization information includes temporary keys, tokens and permission files; the security policy list includes data accessible range.

2. The system for enabling trusted transfer and reverse authorization process for multi-party interaction data as claimed in claim 1 wherein, The remote authentication module provides remote authentication docking services, generates a proof report and sends it to the data receiver for verification; After the data sender is verified to be trusted, the same communication key is shared in the data sender through the ECDH key exchange algorithm.

3. The system for enabling trusted transfer and reverse authorization process for multi-party interaction data as claimed in claim 1 wherein, The data receiver comprises: A data receiving key management module for securely storing and using symmetric encryption keys, temporary keys and communication keys; A remote authentication module connected to the data sender for sending a remote authentication request to the data sender and querying a hardware chip certificate authentication report to a trusted third party, and verifying the report to build a trusted transmission channel if the verification is passed; The trusted transmission module is connected with the data sender and the data receiving key management module, and is used for confirming a TLS version and a selected encryption suite, obtaining a communication key, and constructing a trusted transmission channel. The data decryption module is connected with the data receiving key management module, and is used for decrypting a ciphertext data stream by using the communication key to obtain plaintext data.

4. The system for enabling trusted transport and reverse authorization processing for multi-party interaction data as claimed in claim 3 wherein, The data receiving party initiates a remote authentication request, the data sender calls an ATTESTATION command, and an authentication report is signed by using a chip key and is sent to the data receiving party; the data receiving party inquires a chip certificate from a security processor manufacturer by using a chip ID, and verifies the authentication report by using the chip certificate; After the remote authentication of the data receiving party is completed, it is clear that the data sender environment is trusted, a communication key is generated in the data sender by using an ECDH key protocol and is shared with the data receiving party, and the trusted transmission channel is constructed.

5. A method for trusted transmission and reverse authorization processing for multi-party interaction data based on the system of claim 1, characterized in that, The method comprises the following steps: (1) a trusted environment is established in the data sender; (2) the data sender randomly generates a symmetric encryption key, and data is stored by being encrypted in a database; (3) the data receiving party initiates an authentication request, the data sender calls a command, an authentication report is signed by using a chip key, and is sent to the data receiving party, and a trusted transmission is constructed based on remote authentication; (4) the data receiving party sends a negotiation reverse authorization permission range to the data sender; (5) the data sender customizes a data access policy list in a trusted execution environment, and the data accessible range is clear; (6) the permission range of the reverse authorization is negotiated, and the data sender dynamically authorizes the data receiving party; (7) the data sender securely transmits the authorization information to the data receiving party; (8) the data receiving party requests to access data; (9) the permission is authenticated based on a token in the access request of the data receiving party and a temporary key; (10) the data sender executes a data operation based on a security policy list; (11) the data sender transmits a restricted data stream to the data receiving party through a trusted transmission channel; (12) the data receiving party decrypts a ciphertext data stream by using a communication key to obtain plaintext data; (13) the data sender adjusts the data access policy list and generates a new temporary key for the data receiving party.

6. The method of claim 5, wherein, The step (3) specifically comprises the following steps: (3.1) the data receiving party initiates an authentication request, the data sender calls an ATTESTATION command, and an authentication report is signed by using a chip key and is sent to the data receiving party; (3.2) the data receiving party inquires a chip certificate from a security processor manufacturer by using a chip ID, and verifies the authentication report by using the chip certificate; (3.3) after the remote authentication of the data receiving party is completed, it is clear that the data sender environment is trusted, a communication key is generated in the data sender by using an ECDH key protocol and is shared with the data receiving party, and the trusted transmission channel is constructed.

7. The method of claim 5, wherein the method further comprises: The step (6) specifically comprises the following steps: The permission range of the reverse authorization is negotiated, the data sender dynamically authorizes the data receiving party, a temporary key and an identity proof token are generated for the data receiving party, and the temporary key is attached with a specific permission label.

8. The method of claim 5, wherein the method further comprises: The step (7) specifically comprises the following steps: The data sender calculates a hash value of the permission file through the SM3 algorithm, and performs digital signature on the hash value and the permission file; The data sender sends the authorization information and the signature to the data receiver through a trusted transmission channel, and the data receiver needs to verify the permission file.

9. The method of enabling trusted transport and reverse authorization handling for multi-party interaction data according to claim 5, wherein, The step (9) specifically includes the following steps: Based on the token in the access request of the data receiver and the temporary key, the data sender verifies the identity of the data receiver, and if the identity authentication is passed, the data sender verifies whether the permission tag attached to the temporary key is consistent with the security policy configuration list according to the security policy configuration list.

10. The method of enabling trusted transport and reverse authorization handling for multi-party interaction data according to claim 5, wherein, The step (10) specifically includes the following steps: If the permission tag is consistent with the security policy configuration list, the data sender confirms the data range required by the data receiver according to the temporary key and the security policy list, and performs data operation based on the security policy list.

11. An apparatus for implementing trusted transmission and reverse authorization processing of multi-party interactive data, characterized in that, The device comprises: a processor configured to execute computer executable instructions; a memory storing one or more computer executable instructions, which, when executed by the processor, implement each step of the method for implementing trusted transmission and reverse authorization processing for multi-party interactive data according to any one of claims 5 to 10.

12. A processor for enabling trusted transport and reverse authorization processing for multi-party interaction data, the processor comprising: The processor is configured to execute computer executable instructions, which, when executed by the processor, implement each step of the method for implementing trusted transmission and reverse authorization processing for multi-party interactive data according to any one of claims 5 to 10.

13. A computer-readable storage medium, characterized in that, The computer program stored thereon can be executed by the processor to implement each step of the method for implementing trusted transmission and reverse authorization processing for multi-party interactive data according to any one of claims 5 to 10.

Images