Remote attestation method and related equipment

Abstract

The invention provides a remote certification method and related equipment, which are used for realizing the verification of a remote certification report through a symmetric key of a subscriber identity module (SIM), do not need to depend on a digital certificate provided by a certificate authority (CA) server, and can improve the credibility of the verification process of the remote certification report. In the method, a first device receives request information for requesting a remote attestation report for remote attestation of the first device; the first device sends first information based on the request information, the first information including the remote attestation report and verification information, and the verification information is used for verifying the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on a symmetric key of the SIM in the first device.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a remote certification method and related equipment. Background Art

[0002] During operation, a computer device can send a remote attestation report to a remote server (or virtual machine, container, etc.) that provides remote attestation services. After that, the remote server can verify and store the remote attestation report. This process is called remote attestation (RA). Remote attestation is an important part of the field of trusted computing and can achieve trust measurement of computer devices.

[0003] At present, before a computer device sends a remote attestation report, the computer device can obtain a digital certificate from a certificate authority (CA) server. Subsequently, the computer device can sign the remote attestation report based on the digital certificate to obtain signature information, and carry the signature information in the process of sending the remote attestation report. Among them, the digital certificate issued by the CA server to the device contains the public key owned by the device, the name of the CA server, and the signature provided by the CA server to the certificate content using its own private key. A third party can use the CA's root certificate to verify the authenticity of the above certificate. After that, the other device can act as the sender of the remote attestation report, and can use the private key corresponding to the certificate to sign the remote attestation report. The remote server can use the certificate to verify the information contained in the remote attestation report.

[0004] However, the interactive process of the above remote attestation report is highly dependent on the CA server. If a CA server is unreliable (for example, it is attacked externally or there is a vulnerability in the certificate issuance process, etc.), the digital certificate provided by the CA server will be unreliable, thereby reducing the credibility of the above verification process based on digital certificates. Summary of the invention

[0005] The present application provides a remote attestation method and related equipment, which can verify the remote attestation report through the symmetric key of the SIM card, without relying on the digital certificate provided by the CA server, and can improve the credibility of the remote attestation report verification process. In addition, the remote attestation report can be verified by reusing the mechanism of SIM identity management of the network, without deploying the CA server, simplifying the mechanism of verification through CA certificate in remote attestation, thereby simplifying network management and improving network management efficiency.

[0006] In the first aspect of the present application, a remote attestation method is provided, which is executed by a first device, or the method is executed by some components in the first device (such as a processor, a chip or a chip system, etc.), or the method can also be implemented by a logic module or software that can realize all or part of the functions of the first device. In the first aspect and its possible implementation, the method is described as being executed by the first device, and the first device can be a terminal device or a network device. In the method, the first device receives a request message, and the request message is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the first device sends a first message based on the request message, and the first message includes the remote attestation report and verification information, and the verification information is used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the subscriber identity module (SIM) in the first device.

[0007] Based on the above technical solution, after the first device receives the request information for requesting a remote attestation report, the first device sends the first information including the remote attestation report and verification information based on the request information. The verification information is used to verify the remote attestation report, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device. In other words, the verification information for verifying the remote attestation report is obtained based on the symmetric key of the SIM in the first device. Therefore, in the above technical solution, the first device can verify the remote attestation report through the symmetric key of the SIM, without relying on the digital certificate provided by the CA server, which can improve the credibility of the remote attestation report verification process.

[0008] In addition, in the above technical solution, the first device can verify the remote attestation report through the symmetric key of the SIM, making full use of the network's identity management mechanism for the SIM, simplifying the verification mechanism through the CA certificate in the remote attestation, thereby simplifying network management and improving network management efficiency.

[0009] In this application, SIM refers to a module used to store / configure identity information and symmetric keys. In practical applications, the module can also be implemented by other names, such as identification module, identity identification module, key module, etc., which are not limited here.

[0010] Optionally, the SIM may also be used to store / configure other information of the first device, for example, the other information may include one or more of identity information, mobile country code (MCC), mobile network code (MNC), private user identity, public user identity, and short message parameters.

[0011] Optionally, the SIM may be implemented by hardware or software, which is not limited here.

[0012] For example, when the SIM is implemented by hardware, the SIM may include a universal subscriber identity module (USIM), an internet protocol multimedia service identity module (ISIM), or an embedded subscriber identity module (eSIM), etc.

[0013] For another example, when the SIM is implemented by software, the SIM may include a soft subscriber identity module (softSIM) or a virtual subscriber identity module (virtual SIM, VSIM), etc.

[0014] It should be understood that the first device may include one or more SIMs implemented by hardware, and / or the first device may include one or more SIMs implemented by software.

[0015] It should be understood that the remote attestation report in the first information is used for remote attestation of the first device, and the remote attestation report may include information obtained through measurement (such as measurement logs and / or PCR values, etc.), and the remote attestation report may also be referred to as remote attestation evidence, remote evidence, trusted report, etc., or other names, which are not limited here. The verification information in the first information is used to verify the integrity of the remote attestation report, and / or, the verification information in the first information is used to verify the legality of the remote attestation report. In addition, in the first information, the remote attestation report and the verification information may be independently encapsulated in (or carried on) the first information, and the remote attestation report and the verification information may also be integrated and encapsulated in (or carried on) the first information, which is not limited here.

[0016] Optionally, the verification information used to verify the remote attestation report may also be implemented by other names, such as message authentication code (MAC), verification code, etc.

[0017] In a possible implementation of the first aspect, the request information includes a random number (nonce); the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0018] Based on the above technical solution, the request information received by the first device may include a random number, and accordingly, the verification information used to verify the remote attestation report can be obtained by processing the remote attestation report based on the symmetric key of the SIM and the first key generated by the random number. Thus, the verification information in the first information is obtained based on the symmetric key of the SIM in the first device and the random number carried by the request information, which can ensure the timeliness of the verification information and further improve the credibility of the remote attestation report verification process.

[0019] In a possible implementation manner of the first aspect, the first information also includes the random number.

[0020] Based on the above technical solution, the first information including the remote attestation report and verification information may also include a random number, so that the recipient of the first information can verify the remote attestation report in the first information based on the random number and other information (such as the symmetric key of the SIM).

[0021] In a possible implementation manner of the first aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0022] Based on the above technical solution, the remote certification report in the first information can be obtained based on the processing of the first module in the first device, wherein the first information can also include a first identifier for identifying the SIM and / or the first module, so that the recipient of the first information can use the corresponding information for verification based on the first identifier.

[0023] Exemplarily, the first identifier may include an international mobile subscriber identity (IMSI), a generic public subscription identifier (GPSI), a subscriber user permanent identifier (SUPI), or a mobile subscriber integrated services digital network number (MSISDN), etc.

[0024] In a possible implementation of the first aspect, the first module is a trusted platform module (TPM); or, the first module is a trusted platform control module (TPCM); or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0025] Optionally, the first module is integrated into the SIM, or the SIM is integrated into the first module, or both the first module and the SIM are independently arranged modules.

[0026] Based on the above technical solution, the remote proof report in the first information can be obtained based on the processing of the first module in the first device, wherein the first module can be implemented through the above-mentioned multiple methods to provide multiple flexible implementation methods.

[0027] The second aspect of the present application provides a remote attestation method, which is executed by a second device, or the method is executed by some components in the second device (such as a processor, a chip or a chip system, etc.), or the method can also be implemented by a logic module or software that can realize all or part of the functions of the second device. In the second aspect and its possible implementation, the method is described as being executed by the second device, and the second device can be a terminal device or a network device. In this method, the second device sends a request message, and the request message is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the second device receives a second message, and the second message is used to indicate a verification result of the remote attestation report; wherein the verification result is obtained by verifying the verification information, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device.

[0028] Based on the above technical solution, after the second device sends the request information for requesting the remote attestation report, the second device receives the second information for indicating the verification result of the remote attestation report. The verification result is obtained by verifying the verification information, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device. In other words, the verification information for verifying the remote attestation report is obtained based on the symmetric key of the SIM in the first device. Therefore, in the above technical solution, the verification of the remote attestation report can be achieved through the symmetric key of the SIM, without relying on the digital certificate provided by the CA server, which can improve the credibility of the remote attestation report verification process.

[0029] In addition, in the above technical solution, the remote attestation report can be verified through the symmetric key of the SIM, which makes full use of the network's identity management mechanism for the SIM and simplifies the verification mechanism through the CA certificate in the remote attestation, thereby simplifying network management and improving network management efficiency.

[0030] Optionally, the SIM may be implemented by hardware or software, which is not limited here.

[0031] It should be understood that the remote attestation report in the first information may include information obtained through measurement (such as measurement logs and / or PCR values, etc.), and the remote attestation report may also be referred to as remote attestation evidence, remote evidence, trusted report, etc., or other names, which are not limited here. The verification information in the first information is used to verify the integrity of the remote attestation report, and / or, the verification information in the first information is used to verify the legality of the remote attestation report. In addition, in the first information, the remote attestation report and the verification information may be independently encapsulated in (or carried on) the first information, and the remote attestation report and the verification information may also be integrated and encapsulated in (or carried on) the first information, which is not limited here.

[0032] In a possible implementation manner of the second aspect, the method further includes: the second device receiving first information, the first information including the remote attestation report and the verification information; and the second device sending the first information.

[0033] Based on the above technical solution, as the requester of the remote attestation report, the second device can also receive and send the first information including the remote attestation report and the verification information. In other words, the second device can forward the first information so that the subsequent recipient of the first information can perform the verification process based on the first information, and send the second information indicating the verification result to the second device.

[0034] In a possible implementation of the second aspect, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0035] Based on the above technical solution, the request information sent by the second device may include a random number, and accordingly, the verification information used to verify the remote attestation report can be obtained by processing the remote attestation report based on the symmetric key of the SIM and the first key generated by the random number. Thus, the verification information in the first information is obtained based on the symmetric key of the SIM in the first device and the random number carried by the request information, which can ensure the timeliness of the verification information and further improve the credibility of the remote attestation report verification process.

[0036] In a possible implementation manner of the second aspect, the first information also includes the random number.

[0037] Based on the above technical solution, the first information including the remote attestation report and verification information may also include a random number, so that the recipient of the first information can verify the remote attestation report in the first information based on the random number and other information (such as the symmetric key of the SIM).

[0038] In a possible implementation manner of the second aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0039] Based on the above technical solution, the remote certification report in the first information can be obtained based on the processing of the first module in the first device, wherein the first information can also include a first identifier for identifying the SIM and / or the first module, so that the recipient of the first information can use the corresponding information for verification based on the first identifier.

[0040] In a possible implementation manner of the second aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0041] Optionally, the first module is integrated into the SIM, or the SIM is integrated into the first module, or both the first module and the SIM are independently arranged modules.

[0042] Based on the above technical solution, the remote proof report in the first information can be obtained based on the processing of the first module in the first device, wherein the first module can be implemented through the above-mentioned multiple methods to provide multiple flexible implementation methods.

[0043] The third aspect of the present application provides a remote attestation method, which is executed by a second device, or the method is executed by some components in the second device (such as a processor, a chip or a chip system, etc.), or the method can also be implemented by a logic module or software that can realize all or part of the functions of the second device. In the third aspect and its possible implementation, the method is described as being executed by the second device, and the second device can be a terminal device or a network device. In this method, the second device sends a request message, and the request message is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the second device receives the first information, and the first information includes the remote attestation report and verification information; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device; the second device verifies the verification information and obtains the verification result of the remote attestation report.

[0044] Based on the above technical solution, after the second device sends a request message for requesting a remote attestation report, after the second device receives the first information including the remote attestation report and the verification information, the second device can verify the verification information and obtain a verification result of the remote attestation report. The verification result is obtained by verifying the verification information, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device. In other words, the verification information for verifying the remote attestation report is obtained based on the symmetric key of the SIM in the first device. Therefore, in the above technical solution, the verification of the remote attestation report can be achieved through the symmetric key of the SIM, without relying on the digital certificate provided by the CA server, which can improve the credibility of the remote attestation report verification process.

[0045] In addition, in the above technical solution, the remote attestation report can be verified through the symmetric key of the SIM, which makes full use of the network's identity management mechanism for the SIM and simplifies the verification mechanism through the CA certificate in the remote attestation, thereby simplifying network management and improving network management efficiency.

[0046] Optionally, the SIM may be implemented by hardware or software, which is not limited here.

[0047] It should be understood that the remote attestation report in the first information may include information obtained through measurement (such as measurement logs and / or PCR values, etc.), and the remote attestation report may also be referred to as remote attestation evidence, remote evidence, trusted report, etc., or other names, which are not limited here. The verification information in the first information is used to verify the integrity of the remote attestation report, and / or, the verification information in the first information is used to verify the legality of the remote attestation report. In addition, in the first information, the remote attestation report and the verification information may be independently encapsulated in (or carried on) the first information, and the remote attestation report and the verification information may also be integrated and encapsulated in (or carried on) the first information, which is not limited here.

[0048] In a possible implementation of the third aspect, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0049] Based on the above technical solution, the request information sent by the second device may include a random number, and accordingly, the verification information for verifying the remote attestation report may be obtained by processing the remote attestation report based on the symmetric key of the SIM and the first key generated by the random number. Thus, the verification information in the first information is obtained based on the symmetric key of the SIM in the first device and the random number carried by the request information, which can ensure the timeliness of the verification information and further improve the credibility of the remote attestation report verification process.

[0050] In a possible implementation manner of the third aspect, the first information also includes the random number.

[0051] Based on the above technical solution, the first information including the remote attestation report and verification information may also include a random number, so that the recipient of the first information (such as the second device) can verify the remote attestation report in the first information based on the random number and other information (such as the symmetric key of the SIM).

[0052] In a possible implementation manner of the third aspect, the method also includes: the second device sends third information based on the first information, and receives fourth information; the third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key.

[0053] Correspondingly, the second device verifies the verification information to obtain the verification result of the remote attestation report, including: the second device verifies the verification information based on the fourth information to obtain the verification result of the remote attestation report.

[0054] Based on the above technical solution, the second device can also obtain fourth information indicating the symmetric key or the first key of the SIM based on the interaction of the third information and the fourth information, and can subsequently determine the verification result based on the fourth information.

[0055] In a possible implementation manner of the third aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0056] Based on the above technical solution, the remote certification report in the first information can be obtained based on the processing of the first module in the first device, wherein the first information can also include a first identifier for identifying the SIM and / or the first module, so that the recipient of the first information can use the corresponding information for verification based on the first identifier.

[0057] Optionally, the third information and / or the fourth information may also include the first identifier.

[0058] In a possible implementation manner of the third aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0059] Optionally, the first module is integrated into the SIM, or the SIM is integrated into the first module, or both the first module and the SIM are independently arranged modules.

[0060] Based on the above technical solution, the remote proof report in the first information can be obtained based on the processing of the first module in the first device, wherein the first module can be implemented through the above-mentioned multiple methods to provide multiple flexible implementation methods.

[0061] The fourth aspect of the present application provides a remote attestation method, which is executed by a third device, or the method is executed by some components in the third device (such as a processor, a chip or a chip system, etc.), or the method can also be implemented by a logic module or software that can realize all or part of the functions of the third device. In the fourth aspect and its possible implementation, the method is described as being executed by a third device, and the third device can be a terminal device or a network device. In the method, the third device receives a first message, and the first message includes the remote attestation report and verification information, and the verification information is used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device; the third device sends a second message, and the second information is used to indicate the verification result of the remote attestation report; wherein the verification result is obtained by verification based on the verification information.

[0062] Based on the above technical solution, after the third device receives the first information including the remote attestation report and the verification information, the third device can perform verification based on the verification information to obtain a verification result, and the third device sends a second information indicating the verification result of the remote attestation report. The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device. In other words, the verification information for verifying the remote attestation report is obtained based on the symmetric key of the SIM in the first device. Therefore, in the above technical solution, the verification of the remote attestation report can be achieved through the symmetric key of the SIM, without relying on the digital certificate provided by the CA server, which can improve the credibility of the remote attestation report verification process.

[0063] In addition, in the above technical solution, the remote attestation report can be verified through the symmetric key of the SIM, which makes full use of the network's identity management mechanism for the SIM and simplifies the verification mechanism through the CA certificate in the remote attestation, thereby simplifying network management and improving network management efficiency.

[0064] Optionally, the SIM may be implemented by hardware or software, which is not limited here.

[0065] It should be understood that the remote attestation report in the first information may include information obtained through measurement (such as measurement logs and / or PCR values, etc.), and the remote attestation report may also be referred to as remote attestation evidence, remote evidence, trusted report, etc., or other names, which are not limited here. The verification information in the first information is used to verify the integrity of the remote attestation report, and / or, the verification information in the first information is used to verify the legality of the remote attestation report. In addition, in the first information, the remote attestation report and the verification information may be independently encapsulated in (or carried on) the first information, and the remote attestation report and the verification information may also be integrated and encapsulated in (or carried on) the first information, which is not limited here.

[0066] In a possible implementation manner of the fourth aspect, before sending the second information, the method also includes: the third device sends third information based on the first information, and receives fourth information; the third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key.

[0067] Based on the above technical solution, the third device can also obtain fourth information indicating the symmetric key or the first key of the SIM based on the interaction of the third information and the fourth information, and can subsequently determine the verification result based on the fourth information.

[0068] In a possible implementation manner of the fourth aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0069] Based on the above technical solution, the remote certification report in the first information can be obtained based on the processing of the first module in the first device, wherein the first information can also include a first identifier for identifying the SIM and / or the first module, so that the recipient of the first information can use the corresponding information for verification based on the first identifier.

[0070] Optionally, the third information and / or the fourth information may also include the first identifier.

[0071] In a possible implementation of the fourth aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0072] Optionally, the first module is integrated into the SIM, or the SIM is integrated into the first module, or both the first module and the SIM are independently arranged modules.

[0073] Based on the above technical solution, the remote proof report in the first information can be obtained based on the processing of the first module in the first device, wherein the first module can be implemented through the above-mentioned multiple methods to provide multiple flexible implementation methods.

[0074] The fifth aspect of the present application provides a remote attestation method, which is executed by a fourth device, or the method is executed by some components (such as a processor, a chip or a chip system, etc.) in the fourth device, or the method can also be implemented by a logic module or software that can realize all or part of the functions of the fourth device. In the fifth aspect and its possible implementation, the method is described as being executed by the fourth device, and the fourth device can be a terminal device or a network device. In the method, the fourth device receives a third message; the fourth device sends a fourth message; the third message is used to request a symmetric key of a user identification module SIM and the fourth message is used to indicate the symmetric key of the SIM, wherein the symmetric key of the SIM is used to process a remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report; or, the third message is used to request a first key and the fourth message is used to indicate the first key; wherein the third message includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, the first key is used to process a remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report.

[0075] Based on the above technical solution, the fourth device can send fourth information indicating the symmetric key or the first key of the SIM based on the interaction of the third information and the fourth information, so that the recipient of the fourth information can verify the remote attestation report based on the verification information corresponding to the symmetric key or the first key of the SIM. The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device. In other words, the verification information for verifying the remote attestation report is obtained based on the symmetric key of the SIM in the first device. Therefore, in the above technical solution, the verification of the remote attestation report can be achieved through the symmetric key of the SIM, without relying on the digital certificate provided by the CA server, which can improve the credibility of the remote attestation report verification process.

[0076] In addition, in the above technical solution, the remote attestation report can be verified through the symmetric key of the SIM, which makes full use of the network's identity management mechanism for the SIM and simplifies the verification mechanism through the CA certificate in the remote attestation, thereby simplifying network management and improving network management efficiency.

[0077] Optionally, the SIM may be implemented by hardware or software, which is not limited here.

[0078] It should be understood that the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0079] In a possible implementation manner of the fifth aspect, the remote attestation report is obtained based on processing by the first module in the first device; the third information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0080] Based on the above technical solution, the remote attestation report can be obtained based on the processing of the first module in the first device, wherein the third information can also include a first identifier for identifying the SIM and / or the first module, so that the recipient of the third information (for example, the fourth device) can use the corresponding information for verification based on the first identifier.

[0081] In a possible implementation of the fifth aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0082] Optionally, the first module is integrated into the SIM, or the SIM is integrated into the first module, or both the first module and the SIM are independently arranged modules.

[0083] Based on the above technical solution, the remote proof report in the first information can be obtained based on the processing of the first module in the first device, wherein the first module can be implemented through the above-mentioned multiple methods to provide multiple flexible implementation methods.

[0084] In a sixth aspect of the present application, a device is provided, which can implement the method in the first aspect or any possible implementation of the first aspect. The communication device includes corresponding units or modules for executing the above method. The units or modules included in the communication device can be implemented by software and / or hardware. For example, the device can be a terminal device (or network device), or the device can be a component (such as a processor, chip or chip system, etc.) in the terminal device (or network device), or the device can also be a logic module or software that can implement all or part of the functions of the terminal device (or network device).

[0085] The device includes a processing unit and a transceiver unit; the transceiver unit is used to receive request information, the request information is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the processing unit is used to determine the first information based on the request information; the transceiver unit is also used to send the first information, the first information includes the remote attestation report and verification information, and the verification information is used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device.

[0086] In a possible implementation of the sixth aspect, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0087] In a possible implementation manner of the sixth aspect, the first information also includes the random number.

[0088] In a possible implementation of the sixth aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, which is used to identify the SIM and / or the first module.

[0089] In a possible implementation of the sixth aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0090] In a possible implementation manner of the sixth aspect, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, a soft subscriber identity module softSIM.

[0091] In a possible implementation manner of the sixth aspect, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0092] In the sixth aspect of the present application, the constituent modules of the communication device can also be used to execute the steps performed in each possible implementation method of the first aspect and achieve corresponding technical effects. For details, please refer to the first aspect and will not be repeated here.

[0093] In a seventh aspect of the present application, a device is provided, which can implement the method in the second aspect or any possible implementation of the second aspect. The communication device includes corresponding units or modules for executing the above method. The units or modules included in the communication device can be implemented by software and / or hardware. For example, the device can be a terminal device (or network device), or the device can be a component (such as a processor, chip or chip system, etc.) in the terminal device (or network device), or the device can also be a logic module or software that can implement all or part of the functions of the terminal device (or network device).

[0094] The device includes a processing unit and a transceiver unit; the processing unit is used to determine request information, and the transceiver unit is used to send request information, the request information is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the transceiver unit is also used to receive second information, and the second information is used to indicate a verification result of the remote attestation report; wherein the verification result is obtained by verifying the verification information, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device.

[0095] In a possible implementation of the seventh aspect, the transceiver unit is further used to receive first information, where the first information includes the remote certification report and the verification information; the transceiver unit is also used to send the first information.

[0096] In a possible implementation of the seventh aspect, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0097] In a possible implementation manner of the seventh aspect, the first information also includes the random number.

[0098] In a possible implementation of the seventh aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, which is used to identify the SIM and / or the first module.

[0099] In a possible implementation of the seventh aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0100] In a possible implementation manner of the seventh aspect, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, a soft subscriber identity module softSIM.

[0101] In a possible implementation of the seventh aspect, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0102] In the seventh aspect of the present application, the constituent modules of the communication device can also be used to execute the steps performed in each possible implementation method of the second aspect and achieve corresponding technical effects. For details, please refer to the second aspect and will not be repeated here.

[0103] In an eighth aspect of the present application, a device is provided, which can implement the method in the third aspect or any possible implementation of the third aspect. The communication device includes corresponding units or modules for executing the above method. The units or modules included in the communication device can be implemented by software and / or hardware. For example, the device can be a terminal device (or network device), or the device can be a component (such as a processor, chip or chip system, etc.) in the terminal device (or network device), or the device can also be a logic module or software that can implement all or part of the functions of the terminal device (or network device).

[0104] The device includes a processing unit and a transceiver unit; the transceiver unit is used to send request information, the request information is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the transceiver unit is also used to receive first information, the first information includes the remote attestation report and verification information; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device; the processing unit is used to verify the verification information and obtain a verification result of the remote attestation report.

[0105] In a possible implementation of the eighth aspect, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0106] In a possible implementation manner of the eighth aspect, the first information also includes the random number.

[0107] In a possible implementation of the eighth aspect, the transceiver unit is also used to send third information based on the first information and receive fourth information; the third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key; the processing unit is specifically used to verify the verification information based on the fourth information to obtain the verification result of the remote attestation report.

[0108] In a possible implementation of the eighth aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, which is used to identify the SIM and / or the first module.

[0109] In a possible implementation of the eighth aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0110] In the eighth aspect of the present application, the constituent modules of the communication device can also be used to execute the steps performed in each possible implementation method of the third aspect and achieve corresponding technical effects. For details, please refer to the third aspect and will not be repeated here.

[0111] In a ninth aspect of the present application, a device is provided, which can implement the method in the fourth aspect or any possible implementation of the fourth aspect. The communication device includes corresponding units or modules for executing the above method. The units or modules included in the communication device can be implemented by software and / or hardware. For example, the device can be a terminal device (or network device), or the device can be a component (such as a processor, chip or chip system, etc.) in the terminal device (or network device), or the device can also be a logic module or software that can implement all or part of the functions of the terminal device (or network device).

[0112] The device includes a processing unit and a transceiver unit; the transceiver unit is used to receive first information, the first information includes the remote attestation report and verification information, the verification information is used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device; the processing unit is used to determine second information; the transceiver unit is also used to send second information, the second information is used to indicate the verification result of the remote attestation report; wherein the verification result is obtained by verification based on the verification information.

[0113] In a possible implementation manner of the ninth aspect, the transceiver unit is further used to send third information based on the first information and receive fourth information; the third information is used to request a symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request a first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key.

[0114] In a possible implementation of the ninth aspect, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, which is used to identify the SIM and / or the first module.

[0115] In a possible implementation manner of the ninth aspect, the third information further includes the first identifier, where the first identifier is used to identify the SIM and / or the first module.

[0116] In a possible implementation of the ninth aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0117] In a possible implementation manner of the ninth aspect, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, a soft subscriber identity module softSIM.

[0118] In a possible implementation of the ninth aspect, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0119] In the ninth aspect of the present application, the constituent modules of the communication device can also be used to execute the steps performed in each possible implementation method of the fourth aspect and achieve corresponding technical effects. For details, please refer to the fourth aspect and will not be repeated here.

[0120] The tenth aspect of the present application provides a device, which can implement the method in the fifth aspect or any possible implementation of the fifth aspect. The communication device includes corresponding units or modules for executing the above method. The units or modules included in the communication device can be implemented by software and / or hardware. For example, the device can be a terminal device (or network device), or the device can be a component (such as a processor, chip or chip system, etc.) in the terminal device (or network device), or the device can also be a logic module or software that can implement all or part of the functions of the terminal device (or network device).

[0121] The device includes a processing unit and a transceiver unit; the transceiver unit is used to receive third information; the processing unit is used to determine fourth information; the transceiver unit is also used to send fourth information; the third information is used to request the symmetric key of the user identification module SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the symmetric key of the SIM is used to process the remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, the first key is used to process the remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report.

[0122] In a possible implementation of the tenth aspect, the remote attestation report is obtained based on processing by the first module in the first device; the third information also includes a first identifier, which is used to identify the SIM and / or the first module.

[0123] In a possible implementation of the tenth aspect, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0124] In a possible implementation manner of the tenth aspect, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, a soft subscriber identity module softSIM.

[0125] In a possible implementation of the tenth aspect, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0126] In the tenth aspect of the present application, the constituent modules of the communication device can also be used to execute the steps performed in each possible implementation method of the fourth aspect and achieve corresponding technical effects. For details, please refer to the fourth aspect and will not be repeated here.

[0127] In the eleventh aspect of the present application, there is provided a device, comprising at least one processor, which is coupled to a memory; the memory is used to store programs or instructions; the at least one processor is used to execute the program or instructions so that the device implements the method in the aforementioned first aspect and any possible implementation thereof.

[0128] The twelfth aspect of the present application provides a device, comprising at least one processor, which is coupled to a memory; the memory is used to store programs or instructions; the at least one processor is used to execute the program or instructions so that the device implements the method in the aforementioned second aspect and any possible implementation method thereof.

[0129] The thirteenth aspect of the present application provides a device, comprising at least one processor, which is coupled to a memory; the memory is used to store programs or instructions; the at least one processor is used to execute the program or instructions so that the device implements the method in the aforementioned third aspect and any possible implementation method thereof.

[0130] The fourteenth aspect of the present application provides a device, comprising at least one processor, which is coupled to a memory; the memory is used to store programs or instructions; the at least one processor is used to execute the program or instructions so that the device implements the method in the aforementioned fourth aspect and any possible implementation method thereof.

[0131] The fifteenth aspect of the present application provides a device, comprising at least one processor, which is coupled to a memory; the memory is used to store programs or instructions; the at least one processor is used to execute the program or instructions so that the device implements the method in the aforementioned fifth aspect and any possible implementation method thereof.

[0132] In a sixteenth aspect, an embodiment of the present application provides a device, including at least one logic circuit and an input-output interface; the logic circuit is used to execute the method described in the first aspect and any possible implementation method thereof.

[0133] A seventeenth aspect of an embodiment of the present application provides a device including at least one logic circuit and an input / output interface; the logic circuit is used to execute the method described in the second aspect and any possible implementation method thereof.

[0134] In an eighteenth aspect, an embodiment of the present application provides a device, including at least one logic circuit and an input-output interface; the logic circuit is used to execute the method described in the third aspect and any possible implementation method thereof.

[0135] A nineteenth aspect of an embodiment of the present application provides a device including at least one logic circuit and an input / output interface; the logic circuit is used to execute the method described in the fourth aspect and any possible implementation method thereof.

[0136] The twentieth aspect of an embodiment of the present application provides a device including at least one logic circuit and an input / output interface; the logic circuit is used to execute the method described in the fifth aspect and any possible implementation method thereof.

[0137] A twenty-first aspect of an embodiment of the present application provides a system, which includes at least two of the above-mentioned sixth aspect, seventh aspect, eighth aspect, ninth aspect and tenth aspect.

[0138] Alternatively, the system includes at least two of the apparatus of the eleventh aspect, the apparatus of the twelfth aspect, the apparatus of the thirteenth aspect, the apparatus of the fourteenth aspect, and the apparatus of the fifteenth aspect.

[0139] Alternatively, the system includes at least two of the above-mentioned apparatus of the sixteenth aspect, the apparatus of the seventeenth aspect, the apparatus of the eighteenth aspect, the apparatus of the nineteenth aspect, and the apparatus of the twentieth aspect.

[0140] In aspect 22 of an embodiment of the present application, a computer-readable storage medium is provided, which is used to store one or more computer-executable instructions. When the computer-executable instructions are executed by a processor, the processor executes a method as described in any possible implementation of any one of aspects 1 to 5 above.

[0141] A twenty-third aspect of an embodiment of the present application provides a computer program product (or computer program), which includes instructions. When the instructions in the computer program product are executed by the processor, the processor executes the method described in any possible implementation of any one of the first to fifth aspects above.

[0142] In a twenty-fourth aspect of an embodiment of the present application, a chip system is provided, which includes at least one processor for supporting a device to implement the method described in any possible implementation method of any one of the first to fifth aspects above.

[0143] In a possible design, the chip system may also include a memory for storing program instructions and data necessary for the device. The chip system may be composed of a chip, or may include a chip and other discrete devices. Optionally, the chip system also includes an interface circuit for providing program instructions and / or data to the at least one processor.

[0144] Among them, the technical effects brought about by any design method in the sixth to twenty-fourth aspects can refer to the technical effects brought about by the different design methods in the above-mentioned first to fifth aspects, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0145] Figure 1a A schematic diagram of the trust measurement involved in this application;

[0146] Figure 1b Another schematic diagram of the trust measurement involved in this application;

[0147] Figure 2 Another schematic diagram of the trust measurement involved in this application;

[0148] Figure 3 A schematic diagram of the remote attestation method provided for this application;

[0149] Figure 4a A schematic diagram of the remote attestation method provided for this application;

[0150] Figure 4b A schematic diagram of the remote attestation method provided for this application;

[0151] Figure 5 A schematic diagram of the application of the remote attestation method provided by this application;

[0152] Figure 6a A schematic diagram of the remote attestation method provided for this application;

[0153] Figure 6b Another schematic diagram of the remote attestation method provided for this application;

[0154] Figure 7a A schematic diagram of the application of the remote attestation method provided by this application;

[0155] Figure 7b A schematic diagram of the application of the remote attestation method provided by this application;

[0156] Figure 8 A schematic diagram of the application of the remote attestation method provided by this application;

[0157] Fig. 9 A schematic diagram of the application of the remote attestation method provided by this application;

[0158] Fig.10 A schematic diagram of the device provided for this application;

[0159] Fig.11 Another schematic diagram of the device provided for this application;

[0160] Fig.12 Another schematic diagram of the device provided in the present application. DETAILED DESCRIPTION

[0161] First, the terms involved in the embodiments of the present application are explained to facilitate understanding by those skilled in the art.

[0162] 1. Root of trust (RoT) is usually a component composed of hardware, firmware or software that performs key security functions (verification, measurement, storage, reporting, upgrade, etc.) and whose security needs to be unconditionally trusted. The system cannot detect abnormal behavior of the root of trust, so it must be assumed that the root of trust can always perform its functions in the expected manner.

[0163] 2. A trust chain usually refers to a transferable trust relationship that starts with a trusted root, which serves as an anchor point for the transfer of trust relationships. When a software module verifies or measures the next module and retains a reportable verification record for this verification, the trust relationship can be transferred to the verified or measured module.

[0164] 3. Measurement startup. Among them, the security core loads the core root of trust for measurement (CRTM), which is a read-only code. This code is required to be the first to start after the system is powered on. Its function is to measure the next layer of software BIOS and record (expand) its measurement value to the PCR of the trusted platform module (TPM) chip. Its trust chain is: CRTM->basic input output system (BIOS)->bootloader (translated as boot loader, the bootloader is the first code executed by the embedded system after power-on. After it completes the initialization of the processor and related hardware, it loads the operating system image into the memory and then jumps to the space where the operating system is located to start the operating system)->operation system kernel (OS kernel).

[0165] After each layer of the trust chain loads the next layer of startup code, it follows the principle of measuring first, then expanding, and then starting. Before starting the next layer of software, its measurement value (such as hash value) is expanded into the platform configuration register (PCR) value of the TPM chip. The measurement value and expansion order of each layer of software are recorded in the measurement storage log (stored measurement log, SML). This entire startup process is called measured boot (Measured Boot).

[0166] 4. Remote attestation usually means that after the measurement is started, the remote attestation client program obtains the remote attestation report (also called integrity measurement report, for example, the report contains the stored measurement log and each PCR value, and optionally the remote attestation report can also include signature information for verification) and sends it to the remote server for verification. This process is called remote attestation (RA).

[0167] 5. Trusted Boot usually refers to the combination of measurement boot and remote attestation. It can achieve integrity measurement and extension of the device boot process, generation of remote attestation report and verification of remote attestation report. The combination of these two processes is called Trusted Boot.

[0168] 6. Terminal device: It can be a wireless terminal device capable of receiving network device scheduling and indication information. The wireless terminal device can be a device that provides voice and / or data connectivity to users, or a handheld device with wireless connection function, or other processing devices connected to a wireless modem.

[0169] Exemplarily, the terminal device may be any communication kit (a kit may include, for example, an antenna, a power supply template, a cable, and a Wi-Fi module) with wireless communication functions. The terminal device may also be a communication module with satellite communication functions, a satellite phone or its components, or a very small aperture terminal (VSAT). The terminal device may be a mobile terminal device, such as a mobile phone (or a "cellular" phone, mobile phone), a computer, and a data card. For example, it may be a portable, pocket-sized, handheld, computer-built-in, or vehicle-mounted mobile device that exchanges language and / or data with a wireless access network. For example, personal communication service (PCS) phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDAs), tablet computers, computers with wireless transceiver functions, and other devices. The wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station (MS), a remote station, an access point (AP), a remote terminal, an access terminal, a user terminal, a user agent, a subscriber station (SS), a customer premises equipment (CPE), a terminal, a user equipment (UE), a mobile terminal (MT), a drone, etc. The terminal device may also be a wearable device and a next generation communication system, for example, a terminal device in a 6G communication system or a terminal device in a future evolved public land mobile network (PLMN), etc. Of course, the terminal device in the present application may also refer to a chip, a modem, a system on a chip (SoC) or a communication platform that may include a radio frequency (RF) part, etc., which is mainly responsible for the relevant communication functions in the device.

[0170] 7. Network equipment: may include equipment in a wireless network, for example, a network equipment may be a radio access network (RAN) node (or equipment) that connects a terminal device to a wireless network, which may also be called a base station. At present, some examples of RAN equipment include: a new generation of base stations in future communication systems, a transmission reception point (TRP), an evolved Node B (eNB), a radio network controller (RNC), a Node B (NB), a base station controller (BSC), a base transceiver station (BTS), a home base station (e.g., home evolved NodeB, or home Node B, HNB), a base band unit (BBU), or a wireless fidelity (Wi-Fi) access point (AP), etc. In addition, in a network structure, a network equipment may include a centralized unit (CU) node, a distributed unit (DU) node, or a RAN equipment including a CU node and a DU node.

[0171] In addition, in other possible cases, the network device may be other devices that provide wireless communication functions for the terminal device. The embodiments of the present application do not limit the specific technology and specific device form used by the network device. For the convenience of description, the embodiments of the present application do not limit.

[0172] In addition, the network device may also include a core network device, which may include, for example, an access and mobility management function (AMF), a user plane function (UPF) or a session management function (SMF).

[0173] It should be understood that the terminal equipment and network equipment involved in the present application can be applied to a variety of communication systems, for example, the communication system may include a fourth generation (4G) mobile communication system, a fifth generation (5G) mobile communication system, or a future-oriented evolution system (such as a 6G mobile communication system). Alternatively, the communication system may also include an open access network (open RAN, O-RAN or ORAN), a cloud radio access network (cloud radio access network, CRAN), etc. Alternatively, the communication system may include a communication system in which two or more of the above systems are integrated.

[0174] The terms "system" and "network" in this application can be used interchangeably. "At least one" means one or more, and "plurality" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist, for example, A and / or B, which can represent: the existence of A alone, the existence of A and B at the same time, and the existence of B alone, where A and B can be singular or plural. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "At least one of the following" or its similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, "at least one of A, B or C" includes A, B, C, AB, AC, BC or ABC. And, unless otherwise specified, the ordinal numbers such as "first" and "second" mentioned in the embodiments of the present application are used to distinguish multiple objects, and are not used to limit the order, timing, priority or importance of multiple objects.

[0175] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0176] In recent years, with the rapid popularization of smart phones, mobile Internet has expanded at an unprecedented rate. Various services in human society have gradually shifted from offline to online modes. Mobile Internet has carried huge social and economic value and has become an indispensable infrastructure for human society.

[0177] The value of services carried by the mobile Internet continues to increase. As the infrastructure of the mobile Internet, the operator network has become increasingly complex. In order to simplify network management and improve the agility of network and service deployment, 5G networks, for example, use network function virtualization (NFV) technology. Operators can quickly deploy virtualized 5G core networks on the infrastructure of a general cloud platform. In order to further reduce the cost of network operations, the virtualized core network and the infrastructure platform (NFV infrastructure, NFVI) are separated and belong to different interest entities, which has gradually become the evolution trend of the network. Operators are responsible for operating the virtualized network, while professional cloud vendors are responsible for providing the basic network services. Compared with the traditional cloud-network integration model, the cloud-network separation model brings additional challenges, namely, how operators can trust that the system hardware and platform provided by the cloud service vendors on which the virtualized core network relies are trustworthy.

[0178] To address the above challenges, the 3rd Generation Partnership Project (3GPP) proposed remote attestation (RA) technology based on root of trust (RoT), which can ensure to operators that the hardware and software used by NFVI and the virtualized network elements running on NFVI meet the requirements and expectations of the operators, so that operators and users can trust the network.

[0179] As an implementation example, Figure 1a A schematic diagram of trust measurement is shown, specifically involving an organizational model of a trusted virtualized network based on a cloud-network separation model. Figure 1a In the cloud, NFVI belongs to the trusted network infrastructure, which generally uses common hardware and software platforms and can be provided by cloud vendors. NFVI can use the trusted root to provide the system trusted configuration information of the platform to the outside. At the same time, in order to ensure the trustworthiness of virtualized network elements, NFVI is also responsible for running and managing the virtualized root of trust (Virtual RoT, vRoT). vRoT is responsible for the management and provision of trusted configuration information of virtualized network elements.

[0180] Figure 1a The trust metrics involved include:

[0181] 1. RoT measures hardware resources, which may include BIOS, for example;

[0182] 2. Hardware resources measure the virtualisation layer (bootloader), which may include, for example, a hypervisor / container engine;

[0183] 3. The virtualization layer measures the virtual container (Virtual Container), for example, the virtual container may include a virtual machine / operating system container (VM / OS Container).

[0184] 4. The virtual root of trust (vRoT) located in the virtual resources measures the virtualized network function (VNF).

[0185] Thus, through Figure 1a The trust measurement shown generates evidence for remote attestation. The remote attestation client obtains the remote attestation report from the RoT or vRoT and sends it to the remote server to prove the trustworthiness of the NFV platform or VNF.

[0186] In addition, the most commonly used trusted root technology is TPM technology. TPM is a microcontroller that can store keys, passwords and digital certificates, and can be embedded in computing devices that require TPM functions; TPM chips can resist external software attacks and physical theft to ensure the security of information storage. Among them, the functional module structure of the TPM chip can include computing units, storage units, password computing modules, independent hardware clocks, etc. The main function of TPM is to record the integrity check values ​​of the software and hardware modules during the device startup process.

[0187] As an implementation example, Figure 1b The modules involved in the trusted measurement of TPM include the external interactive interface (I / O) for communication (Communications), the random number generator (Random Number Generator) for generating key seeds and nonce values, the hash algorithm engine (SHA-1Engine), the generation of encryption keys (KeyGeneration), encryption / decryption (RSA Engine), initialization (Opt-in), TPM control (Exec Engine / ProgramCode), the trusted report signing key (Attestation Identity Key, AIK), the integrity measurement (PlitrformConfiguration Rsgister, PCR), the key and owner authorization data (Non-Volatile Storage).

[0188] As an implementation example, Figure 2 The processes ①, ②, ③, ④, ⑤, ⑥, ⑦, and ⑧ in the figure show that the TPM chip obtains the measurement values ​​of the software and hardware components in stages during the device startup process, including CRTM, BIOS, OS, etc. These values ​​are recorded in the PCR register of TPM. TPM and CRTM together constitute the trusted computing foundation of a platform. Among them, CRTM is a trust anchor point, which is a piece of code, generally stored in the read-only memory (ROM) of the hardware platform. After the processor (such as CPU) is powered on, it first loads the CRTM code from ROM and executes the code. CRTM will perform self-measurement, and the measurement value of CRTM will be first stored in TPM, and then CRTM will execute other parts of system startup. After the startup is completed, TPM can provide a device startup report (i.e., remote attestation report) to the remote server through the interface. The report contains the summary of the platform configuration information stored in PCR, and the integrity of the summary is signed by the AIK certificate private key stored in TPM.

[0189] In the network virtualization scenario, remote attestation is an important means for computing platforms to gain the trust of operators. Remote attestation technology refers to the technology of verifying the system configuration confidence of the object to be attested through remote means such as the network without contacting the object to be attested. When the computing platform uses TPM, the platform can obtain system configuration information from the TPM through the remote attestation client, and then the client will send the remote attestation information signed by the TPM to the remote trust party.

[0190] As an implementation example, Figure 3 A typical TPM-based remote attestation process includes the following steps.

[0191] Initialization step: After the TPM (ie, the attestor) in the computing platform is initialized, it obtains a remote attestation certificate (ie, a digital certificate, which is used to generate AIK) from the CA server.

[0192] Step 1. The relying party (or trusted entity) sends a remote attestation request (which may carry a nonce) to the client in the computing platform.

[0193] Step 2. The client in the computing platform forwards the request to the remote attestation interface of the TPM in the computing platform.

[0194] Step 3. The TPM in the computing platform collects evidence through remote attestation, prepares the remote attestation report, and signs it with AIK.

[0195] Step 4. The TPM in the computing platform sends a remote attestation report (which may carry remote attestation evidence, AIK, and signature) to the client in the computing platform.

[0196] It should be understood that the remote attestation evidence is the information obtained by the TPM in the computing platform through measurement (such as measurement logs and / or PCR values, etc.), and the signature is used to verify the remote attestation evidence. In this example, the remote attestation evidence is integrated with the signature and encapsulated in (or carried on) the remote attestation report.

[0197] Optionally, the remote attestation evidence and the signature may be packaged separately and independently, that is, the remote attestation evidence is packaged in (or carried in) the remote attestation report, and the signature is packaged in other ways and then sent.

[0198] Step 5. The client in the computing platform forwards the remote attestation report to the trusting party.

[0199] Step 6. The trusting party forwards the remote attestation report to the verifier.

[0200] Step 7. The verifier performs remote attestation report verification and AIK signature verification to obtain the remote attestation verification result.

[0201] Step 8. The verifier sends the remote attestation verification result to the trusting party.

[0202] Depend on Figure 3 As can be seen from the implementation steps shown, after the TPM on the computing platform is initialized, it first obtains the AIK certificate for remote attestation from the CA. After the computing platform is started, the TPM collects the software and hardware configuration information of the system during startup and operation, and stores it in the corresponding PCR registers. When the trusting party needs to obtain the remote attestation data of the platform, it sends a message to the remote attestation client on the platform to obtain the above data.

[0203] From the above implementation process, it can be seen that the computer device (such as Figure 3 Before sending a remote attestation report, the computer device can obtain a digital certificate from a certificate authority (CA) server. The computer device can then sign the remote attestation report based on the digital certificate to obtain signature information, and carry the signature information during the process of sending the remote attestation report, so that the recipient of the remote attestation report can verify the remote attestation report based on the signature information. In addition, the design of the TPM trusted root is mainly for traditional PCs, and does not take into account the operator network. Therefore, using TPM directly in the operator network will bring some additional management burdens. For example, the operator needs to deploy a certificate server or use an external third-party certificate server to issue a certificate AIK for remote attestation to the TPM.

[0204] However, the interactive process of the above remote attestation report is highly dependent on the CA server. If a CA server is unreliable (for example, it is attacked externally or there is a vulnerability in the certificate issuance process, etc.), the digital certificate provided by the CA server will be unreliable, thereby reducing the credibility of the above verification process based on digital certificates.

[0205] In order to solve the above problems, the present application provides a remote attestation method and related equipment, which can verify the remote attestation report through the symmetric key of the SIM card, without relying on the digital certificate provided by the CA server, and can improve the credibility of the remote attestation report verification process. In addition, the network's identity management mechanism for the SIM card is fully utilized, and the verification mechanism through the CA certificate in the remote attestation is simplified, thereby simplifying network management and improving network management efficiency.

[0206] See also Figure 4a , is a schematic diagram of the remote attestation method provided in this application, and the method includes the following steps.

[0207] It should be noted that Figure 4a In the subsequent other figures, at least two of the first device, the second device, the third device, and the fourth device are used as the execution subjects of the interaction diagram as an example to illustrate the method, but the present application does not limit the execution subjects of the interaction diagram. For example, one of the at least two devices may be a terminal device, and the execution subject may also be a chip, a chip system, or a processor that supports the terminal device to implement the method, or a logic module or software that can implement all or part of the functions of the terminal device. For another example, one of the at least two devices may be a network device, or a chip, a chip system, or a processor that supports the network device to implement the method, or a logic module or software that can implement all or part of the functions of the network device.

[0208] S401. The second device sends a request message, and the first device receives the request message accordingly, wherein the request message is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device.

[0209] It should be noted that the first device may be a device or entity that generates / provides a remote attestation report. For example, the first device may be a terminal device or a network device in a communication network, or the first device may include a server, an NFV platform, a virtual machine, a container, and other devices or entities.

[0210] In addition, the second device may be a device or entity that requests a remote attestation report, for example, the second device may be a server, a virtual machine, a container, or other device or entity that serves as a relying party. Figure 4b When the method shown is applied to a communication network (such as a 5G network or a 6G network, etc.), the second device can be an authentication service function (AUSF) network element, an access and mobility management function (AMF) network element, etc. With the development of communication technology, the second device can also be other names, which are not limited here.

[0211] S402. The first device sends a first message, and the third device receives the first message accordingly. The first message includes the remote attestation report and verification information, and the verification information is used to verify the remote attestation report; the verification information is obtained by processing the remote attestation report based on the symmetric key of the subscriber identity module (SIM) in the first device.

[0212] It should be noted that the third device may be a device or entity that verifies the remote attestation report. For example, the third device may be a server, virtual machine, container or other device or entity that serves as a verifier.

[0213] Optionally, after the first device receives the request information for requesting a remote attestation report in step S401, the first device may perform measurements based on a root of trust (RoT) or a virtual root of trust (RoT) to obtain a remote attestation report, and send the first information including the remote attestation report in step S402. In other words, the remote attestation report in the first information may include information obtained through measurement (such as measurement logs and / or PCR values, etc.), and the remote attestation report may also be referred to as remote attestation evidence, remote evidence, a trusted report, etc., or other names, which are not limited here. In addition, in the first information, the remote attestation report and the verification information may be independently encapsulated in (or carried on) the first information, and the remote attestation report and the verification information may also be integrated and encapsulated in (or carried on) the first information, which is not limited here.

[0214] Optionally, in step S402, the first device may directly send the first information to the third device through the communication link between the first device and the third device. Alternatively, in step S402, the first device may send the first information to the third device through forwarding by the second device, so that the second device, as the requester of the remote attestation report (or called the trusting party, the trusting entity, etc.), can forward the first information including the remote attestation report.

[0215] In this application, SIM refers to a module used to store / configure identity information and symmetric keys. In practical applications, the module can also be implemented by other names, such as identification module, identity identification module, key module, etc., which are not limited here.

[0216] Optionally, the SIM may also be used to store / configure other information of the first device, for example, the other information may include one or more of identity information, mobile country code (MCC), mobile network code (MNC), private user identity, public user identity, and short message parameters.

[0217] Optionally, the SIM may be implemented by hardware or software, which is not limited here.

[0218] For example, when the SIM is implemented by hardware, the SIM may include a universal subscriber identity module (USIM), an internet protocol multimedia service identity module (ISIM), or an embedded subscriber identity module (eSIM), etc.

[0219] For another example, when the SIM is implemented by software, the SIM may include a soft subscriber identity module (softSIM) or a virtual subscriber identity module (virtual SIM, VSIM), etc.

[0220] It should be understood that the first device may include one or more SIMs implemented by hardware, and / or the first device may include one or more SIMs implemented by software.

[0221] Optionally, the verification information used to verify the remote attestation report may also be implemented by other names, such as message authentication code (MAC), verification code, etc.

[0222] In a possible implementation, the request information sent by the second device in step S401 includes a random number (nonce); accordingly, in step S402, in the first information sent by the first device, the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device and the first key generated by the random number. Thus, the verification information in the first information is obtained based on the symmetric key of the SIM in the first device and the random number carried by the request information, which can ensure the timeliness of the verification information and further improve the credibility of the remote attestation report verification process.

[0223] In a possible implementation, in step S402, in the first information sent by the first device, the first information also includes the random number. Specifically, the first information including the remote attestation report and the verification information may also include the random number, so that the recipient of the first information can verify the remote attestation report in the first information based on the random number and other information (such as the symmetric key of the SIM).

[0224] In a possible implementation, the remote attestation report is obtained based on the processing of the first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module. Specifically, the remote attestation report in the first information can be obtained based on the processing of the first module in the first device, wherein the first information can also include a first identifier for identifying the SIM and / or the first module, so that the recipient of the first information can use the corresponding information for verification based on the first identifier.

[0225] Exemplarily, the first identifier may include an international mobile subscriber identity (IMSI), a generic public subscription identifier (GPSI), a subscriber user permanent identifier (SUPI), or a mobile subscriber integrated services digital network number (MSISDN), etc.

[0226] In one possible implementation, the first module is a trusted platform module (TPM); or, the first module is a trusted platform control module (TPCM); or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM. Specifically, the remote attestation report in the first information can be obtained based on the processing of the first module in the first device, wherein the first module can be implemented in the above-mentioned multiple ways to provide multiple flexible implementation ways.

[0227] Optionally, the first module is integrated into the SIM, or the SIM is integrated into the first module, or both the first module and the SIM are independently configured modules. For example, when the first module is integrated into the SIM or the SIM is integrated into the first module, the integrated SIM and the first module may be referred to as a subscriber identity module trusted platform module (SIMTPM), or a virtual subscriber identity module trusted platform module (vSIMTPM), or other names.

[0228] It is understandable that vSimTPM is a software implementation of simTPM. For example, vSimTPM can be used for remote attestation of virtual machines or containers on a server platform. For example, SIMTPM may include a TPM (or TPCM) module and a SIM (or USIM / eSIM, etc.) module, wherein the TPM (or TPCM) module mainly provides the system configuration evidence required for remote attestation of the system platform, and the TPM (or TPCM) module packages it into a remote attestation report, and uses the symmetric key contained in the SIM (or USIM / eSIM, etc.) module to sign the above remote attestation evidence and send it to the client in the first device, which subsequently sends it to the trusting party (such as the second device) and the verifying party (such as the third device) for remote attestation. vSimTPM implements the simTPM function in software, which also includes a TPM (or TPCM) module implemented in software, and a SIM (or USIM / eSIM, etc.) module implemented in software.

[0229] Optionally, when the first module is a functional module in a TPM or a functional module in a TPCM, the first module can be understood as a simplified version of a TPM or TPCM. For example, a traditional TPM or TPCM needs to include Figure 1bThe various modules recorded, and in the above technical solution, the first module may include PCR, that is, the first module only needs to support the reading and writing of PCR, and the first module may not include other modules except the PCR register. Further optionally, the first module may also include at least one of a remote attestation interface module for transmitting a remote attestation report, a TPM management module, an AIK certificate module, and an endorsement key (EK) module. In other words, the first module may include functions such as PCR required by TPM or TPCM, and the first module may not include a remote verification certificate required by TPM or TPCM, and the first module uses the symmetric key of the SIM as the signature key for remote verification when performing remote attestation.

[0230] Optionally, in step S402, the third device may perform verification based on the remote attestation report in the first information in addition to verification based on the verification information in the first information. For example, the third device may verify the remote attestation report based on the remote attestation baseline, and obtain the verification result included in the second information based on the verification process of the verification information and the verification process of the remote attestation report; in other words, the verification result may indicate the verification results of the two verification processes.

[0231] S403. The third device sends the second information, and correspondingly, the second device receives the second information, wherein the second information is used to indicate the verification result of the remote attestation report; wherein the verification result is obtained by verification based on the verification information.

[0232] It should be understood that in step S402, the verification information in the first information sent by the first device is used to verify the integrity of the remote attestation report, and / or, the verification information in the first information sent by the first device is used to verify the legitimacy of the remote attestation report. Accordingly, in step S403, in the verification result indicated by the second information sent by the third device, the verification result may indicate whether the integrity check of the remote attestation report has been verified, and / or, the verification result may indicate whether the legitimacy check of the remote attestation report has been verified.

[0233] In one possible implementation, the third device may be pre-configured (e.g., factory configuration, manual configuration, etc.) with information for verification. For example, the information for verification may include a symmetric key of a SIM of one or more devices (including the first device) that the third device can pre-configure, so that the third device can perform verification on the verification information in the first information based on the pre-configured information for verification in step S403 and obtain a verification result.

[0234] In another possible implementation, the third device may also obtain the information used for verification in other ways. Figure 4bFor example, before the third device sends the second information in step S403, the method further includes the following steps: the third device sends the third information based on the first information in step A, and receives the fourth information in step B. The third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key. Specifically, the third device can also obtain the fourth information indicating the symmetric key or the first key of the SIM based on the interaction of the third information and the fourth information, and the third device can subsequently determine the verification result based on the fourth information, and send the second information indicating the verification result in step S403.

[0235] It can be understood that after the third device obtains the information used for verification (for example, including the symmetric key or the first key of the SIM) based on the above-mentioned methods, the third device can process the remote certification report based on the information used for verification to obtain the target verification information, and the third device can compare the target verification information with the verification information in the first information. When the comparison result indicates that the two are completely consistent (or the difference between the two is lower than or equal to a threshold, etc.), the verification result indicated by the second information sent by the third device is verification passed; and when the comparison result indicates that the two are inconsistent (or the difference between the two is higher than or equal to a threshold, etc.), the verification result indicated by the second information sent by the third device is verification failed.

[0236] It should be noted that the fourth device may be a device for storing the symmetric key of the SIM of one or more devices (including the first device), any of the one or more devices may include simTPM (or vSimTPM), and the fourth device may also store a verification reference value related to remote verification for remote verification. Exemplary, Figure 4b The method shown (or the method described later, such as Figure 6b When the method shown in the figure is applied to a communication network (such as a 5G network or a 6G network, etc.), the fourth device can be a unified data management (UDM) network element. With the development of communication technology, the fourth device can also be other names, which are not limited here.

[0237] It should be understood that Figure 4b The implementation process of step S401, step S402 and step S403 shown in FIG. Figure 4aThe implementation processes of step S401, step S402 and step S403 are the same.

[0238] Based on the above technical solution, after the first device receives the request information for requesting a remote certification report in step S401, the first device sends the first information including the remote certification report and verification information based on the request information in step S402. The verification information is used to verify the remote certification report, and the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device. In other words, the symmetric key of the traditional SIM is mainly used by mobile devices such as mobile phones to perform network access authentication with the operator network. Only after passing the access authentication can the mobile device use the operator network for data transmission and use other services provided by the operator. In the above technical solution, the verification information used to verify the remote certification report is obtained based on the symmetric key of the SIM in the first device. Therefore, the remote certification report can be verified through the symmetric key of the SIM without relying on the digital certificate provided by the CA server, which can improve the credibility of the remote certification report verification process.

[0239] In addition, in the above technical solution, the first device can verify the remote attestation report through the symmetric key of the SIM, making full use of the network's identity management mechanism for the SIM, simplifying the verification mechanism through the CA certificate in the remote attestation, thereby simplifying network management and improving network management efficiency.

[0240] See also Figure 5 , is a schematic diagram of a remote attestation method provided by this application, which is Figure 4b An implementation example of the implementation scheme shown in the figure includes the following steps. It should be understood that Figure 5 In the example shown, simTPM / vSimTPM is an internal module or an external module of the platform / virtual machine container, and the first device may be simTPM / vSimTPM, or a device including simTPM / vSimTPM, such as a platform / virtual machine container or other device or entity. Figure 5 In the example shown, the second device is a trusted entity, the third device is a verification entity, and the fourth device is a UDM.

[0241] Step 1. simTPM or vSimTPM receives a remote verification request (i.e., the request information in the previous embodiment) sent by an external interface (e.g., the interface between simTPM or vSimTPM and the remote attestation client in the platform / virtualizer container), and the request may carry an externally input random number nonce.

[0242] Step 2. simTPM / vSimTPM obtains the corresponding remote attestation evidence from its own PCR register and forms a remote attestation report.

[0243] Step 3. simTPM / vSimTPM generates a first key (denoted as K1 in the figure) using the symmetric key of the SIM contained in itself (denoted as K in the figure) and the received nonce.

[0244] Step 4. simTPM / vSimTPM signs the remote attestation report using the first key, that is, uses the symmetric key to process the remote attestation report to form a MAC verification code.

[0245] Step 5. simTPM / vSimTPM sends the above report to the client to which simTPM / vSimTPM belongs, which includes the IMSI used by the SIM card in simTPM / vSimTPM.

[0246] Step 6. The client sends the remote attestation report, including the received nonce, IMSI, and MAC, to the trusted entity (or trusted party).

[0247] Step 7. The trust entity sends the remote attestation report and related information to the verification party.

[0248] Step 8. The authenticator sends the nonce, IMSI and other information to UDM.

[0249] Step 9. UDM uses the above information to generate the first key.

[0250] Step 10. UDM sends the first key to the verification party.

[0251] Step 11. The verifier uses the first key to verify the received remote attestation information and compares the generated MAC to see if they are consistent. If they are consistent, the verifier further compares and verifies whether the information in the remote attestation report is consistent with the information stored by the verifier and outputs the verification result.

[0252] Step 12: The verifier returns the verification result to the trust entity.

[0253] based on Figure 4b The solution shown provides a solution for a first device (such as a terminal device or a network device) to perform remote attestation using simTPM / vSimTPM. The first device does not need to obtain an AIK certificate to provide remote attestation, and the operator network does not need to manage an additional CA system to distribute keys. The operator's ability to manage SIM / USIM symmetric keys simplifies the process of issuing keys in the system.

[0254] In the above Figure 4a , Figure 4b and Figure 5 In the technical scheme shown, the second device relies on other devices (such as a third device and a possible fourth device) to perform verification based on verification information, while in other implementation methods provided in the present application, the second device acts as the requestor of the remote attestation report, and the second device can also perform related verification processes, which will be exemplarily described below in conjunction with more drawings.

[0255] See also Figure 6a , is a schematic diagram of the remote attestation method provided in this application, and the method includes the following steps.

[0256] S601. The second device sends a request message, and correspondingly, the first device receives the request message.

[0257] It should be noted that the implementation process of step S601 may refer to the implementation process of the above step S401.

[0258] S602. The first device sends the first information, and correspondingly, the second device receives the first information.

[0259] It should be noted that the second device may be a device or entity for requesting a remote attestation report, and the second device may also be a device for verifying the remote attestation report. For example, the second device may be a server, a virtual machine, a container or other device or entity.

[0260] In step S602, the implementation process of the first information may refer to the relevant implementation of the above step S402.

[0261] S603. The second device determines a verification result based on the first information.

[0262] It should be understood that in step S602, the verification information in the first information sent by the first device is used to verify the integrity of the remote attestation report, and / or, the verification information in the first information sent by the first device is used to verify the legitimacy of the remote attestation report. Accordingly, in step S603, in the verification result determined by the second device, the verification result may indicate whether the integrity check of the remote attestation report has been verified, and / or, the verification result may indicate whether the legitimacy check of the remote attestation report has been verified.

[0263] In one possible implementation, the second device may be pre-configured (e.g., factory configuration, manual configuration, etc.) with information for verification. For example, the information for verification may include a symmetric key of a SIM of one or more devices (including the first device) that the second device may pre-configure, so that the second device can perform verification on the verification information in the first information based on the pre-configured information for verification in step S603 and obtain a verification result.

[0264] In another possible implementation, the second device may also obtain information for verification in other ways. Figure 6b For example, before the second device sends the second information in step S603, the method further includes the following steps: the second device sends third information based on the first information in step C, and receives fourth information in step D. The third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key. Accordingly, in Figure 6b In step S603, the second device verifies the verification information, and obtains the verification result of the remote attestation report, including: the second device verifies the verification information based on the fourth information, and obtains the verification result of the remote attestation report. Thus, the second device can also obtain the fourth information indicating the symmetric key or the first key of the SIM based on the interaction of the third information and the fourth information, and can subsequently determine the verification result based on the fourth information.

[0265] It can be understood that after the second device obtains the information used for verification (for example, including the symmetric key or the first key of the SIM) based on the above-mentioned multiple methods, the second device can process the remote certification report based on the information used for verification to obtain the target verification information, and the second device can compare the target verification information with the verification information in the first information. When the comparison result indicates that the two are completely consistent (or the difference between the two is lower than or equal to the threshold, etc.), the verification result determined by the second device is verification passed; when the comparison result indicates that the two are inconsistent (or the difference between the two is higher than or equal to the threshold, etc.), the verification result determined by the second device is verification failed.

[0266] It should be understood that Figure 6b The implementation process of step S601 and step S602 shown in FIG. Figure 6a The implementation processes of step S601 and step S602 are the same.

[0267] Optionally, in Figure 6a or Figure 6b In step S603, the second device may verify based on the remote attestation report in the first information in addition to the verification information in the first information. For example, the second device may verify the remote attestation report based on the remote attestation baseline, and obtain the verification result contained in the second information based on the verification process of the verification information and the verification process of the remote attestation report; in other words, the verification result may indicate the verification results of the two verification processes.

[0268] Optionally, in Figure 6a or Figure 6b In step S603, in addition to verification based on the verification information in the first information, the second device can also verify based on the remote attestation report in the first information. For example, the second device sends the remote attestation report to other devices (such as a third device, which can be a device for verifying the remote attestation report, such as the third device can be a server, virtual machine, container, etc. as a verifier), so that other devices can verify the remote attestation report based on the remote attestation baseline, and send the verification result of the remote attestation report to the second device based on the verification process of the remote attestation report; subsequently, the second device can obtain the verification result in step S603 based on the verification result obtained by locally verifying the verification information and the verification result of the remote attestation report. In other words, the verification result in step S603 can indicate the verification results of the two verification processes.

[0269] It is understandable that the remote attestation baseline can be implemented in a variety of ways. For example, the remote attestation baseline can include a set of values ​​or value ranges, and when the value of the remote attestation report is within the set of values ​​or value ranges, the verification result of the remote attestation report based on the remote attestation baseline can be determined to be a passed verification; and when the value of the remote attestation report is outside the set of values ​​or value ranges, the verification result of the remote attestation report based on the remote attestation baseline can be determined to be a failed verification.

[0270] Based on the above technical solution, after the second device sends the request information for requesting the remote attestation report in step S601, after the second device receives the first information including the remote attestation report and the verification information in step S602, the second device can verify the verification information in step S603 to obtain the verification result of the remote attestation report. Among them, the verification result is obtained by verifying the verification information, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device. In other words, the verification information for verifying the remote attestation report is obtained based on the symmetric key of the SIM in the first device. Therefore, in the above technical solution, the verification of the remote attestation report can be realized by the symmetric key of the SIM, without relying on the digital certificate provided by the CA server, which can improve the credibility of the remote attestation report verification process. In addition, in the above technical solution, the verification of the remote attestation report can be realized by the symmetric key of the SIM, which makes full use of the network's identity management mechanism for the SIM, simplifies the mechanism of verification through the CA certificate in the remote attestation, and thus simplifies network management and improves network management efficiency.

[0271] See also Figure 7a , is a schematic diagram of a remote attestation method provided by this application, which is Figure 6b An implementation example of the implementation scheme shown in the figure includes the following steps. It should be understood that Figure 7a In the example shown, simTPM / vSimTPM is an internal module or an external module of the terminal, and the first device may be simTPM / vSimTPM, or a device including simTPM / vSimTPM, such as a terminal device or other device or entity. Figure 7a In the example shown, the second device is an authentication service function (AUSF) (an example of a trusted entity), the third device is a verifier (or verification entity), and the fourth device is a UDM.

[0272] Step 1. AUSF sends a remote attestation request (i.e., the request information in the previous embodiment) to the terminal (e.g., the remote attestation client in the terminal), which includes a random number nonce. The terminal sends the random number to simTPM / vSimTPM through an interface call.

[0273] Step 2. After receiving the request, the simTPM / vSimTPM on the terminal first uses the remote attestation evidence stored in the simTPM / vSimTPM to form a remote attestation report.

[0274] Step 3. simTPM / vSimTPM generates a first key (denoted as K1 in the figure) using the nonce and the symmetric key of the SIM (denoted as K in the figure) stored in the SIM / USIM profile, as well as the received nonce.

[0275] Step 4. simTPM / vSimTPM generates a MAC of the remote attestation report using K1.

[0276] Step 5. simTPM / vSimTPM returns the remote attestation report including MAC to the terminal.

[0277] Step 6. The terminal sends the above remote attestation report, MAC, IMSI and nonce to AUSF.

[0278] Step 7. After receiving the above message, AUSF extracts IMSI and nonce from it and sends the IMSI and nonce to UDM.

[0279] Step 8. UDM uses IMSI to obtain the corresponding K and uses nonce to generate K1.

[0280] Step 9. UDM returns the generated K1, nonce and IMSI to AUSF.

[0281] Step 10. AUSF uses the received K1 to verify the MAC in the remote certification message received from the terminal (i.e., the verification process performed based on the verification information above).

[0282] Step 11. After the MAC verification is passed, AUSF extracts the remote attestation report from the message received in the above step 6 and sends it to the verification node.

[0283] Step 12. The verifier compares the received remote verification report with its own stored remote verification baseline to form a verification result (i.e. the verification process performed based on the remote verification report in the previous text).

[0284] Step 13. The verifier returns the remote attestation result to AUSF.

[0285] See also Figure 7b , is a schematic diagram of a remote attestation method provided by this application, which is Figure 6b An implementation example of the implementation scheme shown in the figure includes the following steps. It should be understood that Figure 7bIn the example shown, the simTPM / vSimTPM is an internal module or an external module of the base station, and the first device may be a simTPM / vSimTPM, or a device including a simTPM / vSimTPM, such as a base station or other device or entity. Figure 7b In the example shown, the second device is a device management node (an example of a trusted entity), the third device is a verifier (or verification entity), and the fourth device is a UDM.

[0286] Step 1. The device management node sends a remote attestation request (i.e., the request information in the previous embodiment) to the base station (e.g., the remote attestation client in the base station), which includes a random number nonce. The base station sends the random number to simTPM / vSimTPM through an interface call.

[0287] Step 2. After receiving the request, the simTPM / vSimTPM on the base station first uses the remote attestation evidence stored in the simTPM / vSimTPM to form a remote attestation report.

[0288] Step 3. simTPM / vSimTPM generates a first key (denoted as K1 in the figure) using the nonce and the symmetric key of the SIM (denoted as K in the figure) stored in the SIM / USIM profile, as well as the received nonce.

[0289] Step 4. simTPM / vSimTPM generates a MAC of the remote attestation report using K1.

[0290] Step 5. simTPM / vSimTPM returns the remote attestation report including MAC to the base station.

[0291] Step 6. The base station sends the remote attestation report, MAC, IMSI and nonce to the device management node.

[0292] Step 7. After receiving the above message, the device management node extracts the IMSI and nonce from it, and sends the IMSI and nonce to the UDM.

[0293] Step 8. UDM uses IMSI to obtain the corresponding K and uses nonce to generate K1.

[0294] Step 9. UDM returns the generated K1, nonce and IMSI to the device management node.

[0295] Step 10. The device management node uses the received K1 to verify the MAC in the remote certification message received from the base station (ie, the verification process performed based on the verification information above).

[0296] Step 11. After the MAC verification is passed, the device management node extracts the remote certification report from the message received in the above step 6 and sends it to the verification node.

[0297] Step 12. The verifier compares the received remote verification report with its own stored remote verification baseline to form a verification result (i.e. the verification process performed based on the remote verification report in the previous text).

[0298] Step 13. The verifier returns the remote attestation result to the device management node.

[0299] It should be understood that Figure 7b The implementation example shown mainly solves the remote attestation solution when the base station uses simTPM / vSimTPM. The steps are similar to Figure 7a The implementation examples shown are similar, except for the node roles. Figure 7a The terminal nodes in are replaced by Figure 7b The base station in Figure 7a Replace AUSF in with Figure 7b The device management node in .

[0300] As can be seen from the above implementation examples, the SIM technology and TPM technology are extended, and the symmetric key of the SIM in simTPM is used for remote certification. In addition, the scope of use of simTPM is extended to network-side devices, including base stations, core network server platforms, etc.

[0301] In some implementations, a software-based vSimTPM is proposed as a trusted root of a virtual network element to replace the vTPM.

[0302] In some implementations, the symmetric key of the SIM in simTPM / vSimTPM is used as a remote attestation key (or a basis for determining the remote attestation key) in conjunction with a symmetric key stored in a network-side element (such as UDM) to provide remote attestation for the mobile operator's network.

[0303] In some implementations, the concept of simTPM can be extended to the virtual machine level, forming a trusted root system with simTPM as the core.

[0304] In some implementations, entities in the operator network, including mobile terminals, base stations, NFV platforms, virtual machines, containers, etc., use a TPM module or function embedded in Sim / soft Sim to provide remote attestation, where the TPM module or function is responsible for collecting remote attestation materials (used to obtain remote attestation reports).

[0305] In some implementations, the TPM module or function utilizes the IMSI and symmetric key embedded in the SIM / soft SIM to provide verification information (eg, message authentication code MAC) for remote attestation material.

[0306] In some implementations, the UDM user database interface provides the remote authentication entity with an authentication key (eg, a symmetric key of the SIM or a first key) based on the received request, including the IMSI and necessary key generation parameters.

[0307] In some implementations, the remote verification entity verifies the integrity of the remote attestation evidence based on a key provided by the UDM interface and further verifies the evidence.

[0308] In some implementations, simTPM can also be implemented through software to provide remote verification for upper-layer software.

[0309] See also Figure 8 , which is an implementation example of the process of the remote attestation method provided in this application, includes the following steps.

[0310] Step 1. simTPM / vSimTPM receives a call request from the outside world and generates a remote attestation report using the PCR data stored in the TPM function module. It should be understood that Figure 8 Step 1 shown may be an implementation example of the interaction of the aforementioned request information.

[0311] Step 2. simTPM / vSimTPM generates a remote attestation key using the nonce in the call request and the symmetric key in the SIM / USIM module, and uses the key to generate a MAC for the remote attestation report.

[0312] Step 3. The device to which simTPM / vSimTPM belongs (which may include a physical device or a virtual device) sends the above remote attestation report to the trusting party and the verifying party on the network side. It should be understood that Figure 8 Step 3 shown may be an implementation example of the interaction of the first information mentioned above.

[0313] Step 4. The relying party and the verifier use the IMSI and nonce in the above message to obtain the remote attestation key from the UDM through steps 5-7. It should be understood that Figure 8 The steps 5-7 shown may be an implementation example of the interaction between the third information and the fourth information mentioned above.

[0314] Thereafter, the trusting party or the verifying party uses the above-mentioned key to verify the MAC of the remote attestation report, and finally completes the remote attestation and can output the verification result.

[0315] See also Fig. 9, is an implementation example of the implementation architecture of the remote attestation method provided in this application. Fig. 9 As shown, the first device may include Fig. 9 At least one of vSimTPM1, vSimTPM2 in the virtual machine monitor (VMM) in the hardware system, and the encryption library (Crypto Lib) in the hardware system.

[0316] Optionally, vSimTPM1 is used for virtual machine (VM) 1 with VNF1 function, and vSimTPM2 is used for VM2 with VNF1 function. vSimTPM1 and vSimTPM2 can be called virtual trusted roots. vSimTPM is a software implementation of simTPM, mainly used for remote attestation of virtual machines or containers on server platforms.

[0317] Optionally, the Crypto Lib in the hardware system can be based on an open root of trust design, including a TPM (and / or TPCM) module and a SIM module, and the Crypto Lib in the hardware system can also include universal integrated circuit card (UICC) hardware, OS and interfaces, etc.

[0318] also, Fig. 9 The TPM, TPCM, vSimTPM1 or vSimTPM2 shown can be a complete TPM (or TPCM) or a simplified version of TPM (or TPCM), that is, it includes the functions such as PCR required by TPM and supports reading and writing PCR. Optionally, it can also include a remote attestation interface module for transmitting remote attestation reports, a TPM management module, an AIK certificate module, and an endorsement key (EK) module. In other words, when performing remote attestation, the symmetric key of the SIM can be used as the signature key for remote verification.

[0319] The present application is described above from the perspective of methods and systems. The device provided by the present application will be introduced below based on more drawings.

[0320] See also Fig.10 An embodiment of the present application provides a device 1000 , which includes a transceiver unit 1001 and a processing unit 1002 .

[0321] It should be understood that the device 1000 can implement the functions of any device (such as the first device, the second device, the third device or the fourth device) in the above method embodiments, and thus can also achieve the beneficial effects of the above method embodiments. In the embodiments of the present application, the device 1000 can be any device in the above method embodiments, or an integrated circuit or component, such as a chip, inside any device in the above method embodiments.

[0322] In one possible implementation, when the device 1000 is used to execute the method executed by the first device in any of the aforementioned embodiments, the transceiver unit 1001 is used to receive request information, the request information is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the processing unit 1002 is used to determine the first information based on the request information; the transceiver unit 1001 is also used to send the first information, the first information includes the remote attestation report and verification information, and the verification information is used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device.

[0323] In one possible implementation, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0324] In a possible implementation manner, the first information also includes the random number.

[0325] In a possible implementation, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0326] In a possible implementation, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0327] In a possible implementation, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, or a soft subscriber identity module softSIM.

[0328] In a possible implementation, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0329] In one possible implementation, when the device 1000 is used to execute the method executed by the second device in any of the aforementioned embodiments, the processing unit 1002 is used to determine the request information, and the transceiver unit 1001 is used to send the request information, the request information is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the transceiver unit 1001 is also used to receive second information, and the second information is used to indicate a verification result of the remote attestation report; wherein the verification result is obtained by verifying the verification information, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device.

[0330] In a possible implementation, the transceiver unit 1001 is further used to receive first information, where the first information includes the remote certification report and the verification information; the transceiver unit 1001 is further used to send the first information.

[0331] In one possible implementation, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0332] In a possible implementation manner, the first information also includes the random number.

[0333] In a possible implementation, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0334] In a possible implementation, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0335] In a possible implementation, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, or a soft subscriber identity module softSIM.

[0336] In a possible implementation, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0337] In one possible implementation, when the device 1000 is used to execute the method executed by the second device in any of the aforementioned embodiments, the transceiver unit 1001 is used to send a request message, the request message is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; the transceiver unit 1001 is also used to receive first information, the first information including the remote attestation report and verification information; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device; the processing unit 1002 is used to verify the verification information to obtain a verification result of the remote attestation report.

[0338] In one possible implementation, the request information includes a random number; the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device, including: the verification information is obtained by processing the remote certification report based on the symmetric key of the SIM in the first device and a first key generated by the random number.

[0339] In a possible implementation manner, the first information also includes the random number.

[0340] In one possible implementation, the transceiver unit 1001 is also used to send third information based on the first information, and receive fourth information; the third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key; the processing unit 1002 is specifically used to verify the verification information based on the fourth information to obtain the verification result of the remote attestation report.

[0341] In a possible implementation, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0342] In a possible implementation, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0343] In one possible implementation, when the device 1000 is used to execute the method executed by the third device in any of the aforementioned embodiments, the transceiver unit 1001 is used to receive first information, the first information including the remote attestation report and verification information, the verification information being used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device; the processing unit 1002 is used to determine second information; the transceiver unit 1001 is also used to send second information, the second information being used to indicate a verification result of the remote attestation report; wherein the verification result is obtained by verification based on the verification information.

[0344] In a possible implementation, the transceiver unit 1001 is also used to send third information based on the first information and receive fourth information; the third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, the third information is used to request the first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key.

[0345] In a possible implementation, the remote attestation report is obtained based on processing by a first module in the first device; the first information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0346] In a possible implementation manner, the third information further includes the first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0347] In a possible implementation, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0348] In a possible implementation, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, or a soft subscriber identity module softSIM.

[0349] In a possible implementation, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0350] In one possible implementation, when the device 1000 is used to execute the method executed by the fourth device in any of the aforementioned embodiments, the transceiver unit 1001 is used to receive third information; the processing unit 1002 is used to determine fourth information; the transceiver unit 1001 is also used to send fourth information; the third information is used to request a symmetric key of a user identification module SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the symmetric key of the SIM is used to process a remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report; or, the third information is used to request a first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, the first key is used to process the remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report.

[0351] In a possible implementation, the remote attestation report is obtained based on processing by a first module in the first device; the third information also includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

[0352] In a possible implementation, the first module is a trusted platform module TPM; or, the first module is a trusted platform control module TPCM; or, the first module is a functional module in the TPM; or, the first module is a functional module in the TPCM.

[0353] In a possible implementation, the SIM includes a universal subscriber identity module USIM, an Internet Protocol Multimedia Service Identity Module ISIM, or an embedded subscriber identity module eSIM, or a soft subscriber identity module softSIM.

[0354] In a possible implementation, the verification information is used to verify the integrity of the remote attestation report, and / or the verification information is used to verify the legitimacy of the remote attestation report.

[0355] It should be noted that the information execution process of the units of the above-mentioned device 1000 and the corresponding technical effects, etc., can be specifically referred to the description in the method embodiment shown in the above-mentioned application, and will not be repeated here.

[0356] See also Fig.11 , is another schematic structural diagram of the device 1100 provided in the present application, and the device 1100 at least includes an input and output interface 1102. The device 1100 may be a chip or an integrated circuit.

[0357] Optionally, the device further includes a logic circuit 1101 .

[0358] in, Fig.10The transceiver unit 1001 shown may be a communication interface, which may be Fig.11 The input / output interface 1102 in the communication interface may include an input interface and an output interface. Alternatively, the communication interface may also be a transceiver circuit, which may include an input interface circuit and an output interface circuit.

[0359] In addition, the logic circuit 1101 and the input / output interface 1102 can execute the method executed by any device (eg, the first device, the second device, the third device, or the fourth device) in the aforementioned method embodiments and achieve corresponding beneficial effects, which will not be repeated here.

[0360] Optional, Fig.10 The processing unit 1002 shown can be Fig.11 The logic circuit 1101 in the embodiment of the present invention can be a processing device, and the functions of the processing device can be partially or completely implemented by software. The functions of the processing device can be partially or completely implemented by software.

[0361] Optionally, the processing device may include a memory and a processor, wherein the memory is used to store a computer program, and the processor reads and executes the computer program stored in the memory to perform corresponding processing and / or steps in any one of the method embodiments.

[0362] Alternatively, the processing device may include only a processor. A memory for storing a computer program is located outside the processing device, and the processor is connected to the memory via a circuit / wire to read and execute the computer program stored in the memory. The memory and the processor may be integrated together, or may be physically independent of each other.

[0363] Optionally, the processing device may be one or more chips, or one or more integrated circuits. For example, the processing device may be one or more field-programmable gate arrays (FPGA), application specific integrated circuits (ASIC), system on chip (SoC), central processor unit (CPU), network processor (NP), digital signal processor (DSP), microcontroller unit (MCU), programmable logic device (PLD) or other integrated chips, or any combination of the above chips or processors.

[0364] See also Fig.12 , is the device 1200 involved in the above embodiments provided in an embodiment of the present application, and the device 1200 can specifically be the first device, the second device, the third device or the fourth device in the above embodiments.

[0365] Herein, a possible logical structure diagram of the device 1200 is shown. The device 1200 may include but is not limited to at least one processor 1201 and a communication port 1202 .

[0366] Further optionally, the device may also include at least one of a memory 1203 and a bus 1204 . In an embodiment of the present application, the at least one processor 1201 is used to control and process the actions of the device 1200 .

[0367] In addition, the processor 1201 can be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a transistor logic device, a hardware component or any combination thereof. It can implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. The processor can also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a digital signal processor and a microprocessor, and the like. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0368] It should be noted that Fig.12 The device 1200 shown can be specifically used to implement the steps implemented by any device (such as the first device, the second device, the third device or the fourth device) in the aforementioned method embodiment, and achieve the corresponding technical effects of the terminal device. Fig.12 The specific implementation methods of the device shown can all be referred to the description in the aforementioned method embodiment, and will not be described in detail here.

[0369] An embodiment of the present application also provides a computer-readable storage medium storing one or more computer-executable instructions. When the computer-executable instructions are executed by a processor, the processor executes the method described in a possible implementation method of any device (e.g., the first device, the second device, the third device, or the fourth device) in the aforementioned method embodiment.

[0370] An embodiment of the present application also provides a computer program product (or computer program) storing one or more computers. When the computer program product is executed by the processor, the processor executes a method that may be implemented by any device (for example, the first device, the second device, the third device or the fourth device) in the above method embodiment.

[0371] An embodiment of the present application also provides a chip system, which includes at least one processor for supporting a terminal device to implement the functions involved in the possible implementation methods of any device (e.g., the first device, the second device, the third device, or the fourth device) in the above method embodiment.

[0372] Optionally, the chip system further includes an interface circuit, which provides program instructions and / or data for the at least one processor. In a possible design, the chip system may also include a memory, which is used to store program instructions and data necessary for the terminal device. The chip system may be composed of a chip, or may include a chip and other discrete devices.

[0373] In a possible design, the chip system may also include a memory, which is used to store the necessary program instructions and data of any device in the above method embodiment. The chip system may be composed of a chip, or may include a chip and other discrete devices.

[0374] An embodiment of the present application also provides a system, which includes at least two devices among the first device, the second device, the third device and the fourth device in any of the above embodiments.

[0375] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are schematic. For example, the division of the units is a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0376] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0377] In addition, each functional unit in each embodiment of the present application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of a software functional unit. If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the part of the technical solution of the present application that essentially contributes or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a disk or an optical disk.

[0378] The above is only a specific implementation of the embodiment of the present application, but the protection scope of the embodiment of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or replacements within the technical scope disclosed in the embodiment of the present application, which should be included in the protection scope of the embodiment of the present application. Therefore, the protection scope of the embodiment of the present application should be based on the protection scope of the claims.

Claims

1. A remote attestation method, characterized in that: include: The first device receives request information, the request information is used to request a remote attestation report, and the remote attestation report is used for remote attestation of the first device; The first device sends first information, which includes the remote attestation report and verification information, and the verification information is used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device.

2. The method according to claim 1, characterized in that The request information includes a random number; The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device, including: The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device and the first key generated by the random number.

3. The method according to claim 2, characterized in that The first information also includes the random number.

4. The method according to any one of claims 1 to 3, characterized in that: The remote attestation report is obtained based on processing by the first module in the first device; The first information further includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

5. The method according to claim 4, characterized in that The first module is a Trusted Platform Module TPM; or, The first module is a trusted platform control module TPCM; or, The first module is a functional module in the TPM; or, The first module is a functional module in TPCM.

6. A remote attestation method, characterized in that: include: The second device sends a request message, wherein the request message is used to request a remote attestation report, wherein the remote attestation report is used for remote attestation of the first device; The second device receives second information, and the second information is used to indicate the verification result of the remote attestation report; wherein the verification result is obtained by verifying based on verification information, and the verification information is obtained by processing the remote attestation report based on the symmetric key of the user identification module SIM in the first device.

7. The method according to claim 6, characterized in that The method further comprises: The second device receives first information, the first information including the remote attestation report and the verification information; The second device sends the first information.

8. The method according to claim 6 or 7, characterized in that: The request information includes a random number; The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device, including: The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device and the first key generated by the random number.

9. The method according to claim 8, characterized in that The first information also includes the random number.

10. The method according to any one of claims 6 to 9, characterized in that: The remote attestation report is obtained based on processing by the first module in the first device; The first information further includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

11. The method according to claim 10, characterized in that The first module is a Trusted Platform Module TPM; or, The first module is a trusted platform control module TPCM; or, The first module is a functional module in the TPM; or, The first module is a functional module in TPCM.

12. A remote attestation method, characterized in that: include: The second device sends a request message, wherein the request message is used to request a remote attestation report, wherein the remote attestation report is used for remote attestation of the first device; The second device receives first information, the first information including the remote attestation report and verification information; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the subscriber identity module SIM in the first device; The second device verifies the verification information and obtains a verification result of the remote certification report.

13. The method according to claim 12, characterized in that The request information includes a random number; The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device, including: The verification information is obtained by processing the remote attestation report based on the symmetric key of the SIM in the first device and the first key generated by the random number.

14. The method according to claim 13, characterized in that The first information also includes the random number.

15. The method according to any one of claims 12 to 14, characterized in that The method further comprises: The second device sends third information and receives fourth information; The third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, The third information is used to request a first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on a symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key; The second device verifies the verification information, and obtains a verification result of the remote attestation report including: The second device verifies the verification information based on the fourth information to obtain the verification result.

16. The method according to any one of claims 12 to 15, characterized in that The remote attestation report is obtained based on processing by the first module in the first device; The first information further includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

17. The method according to claim 16, characterized in that The first module is a Trusted Platform Module TPM; or, The first module is a trusted platform control module TPCM; or, The first module is a functional module in the TPM; or, The first module is a functional module in TPCM.

18. A remote attestation method, characterized in that: include: The third device receives the first information, the first information including the remote attestation report and verification information, the verification information being used to verify the remote attestation report; wherein the verification information is obtained by processing the remote attestation report based on the symmetric key of the subscriber identity module SIM in the first device; The third device sends second information, where the second information is used to indicate a verification result of the remote certification report; wherein the verification result is obtained by verification based on the verification information.

19. The method according to claim 18, characterized in that Before the third device sends the second information, the method further includes: The third device sends third information and receives fourth information; The third information is used to request the symmetric key of the SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the verification result is obtained by verification based on the verification information and the symmetric key of the SIM; or, The third information is used to request a first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on a symmetric key of the SIM and the random number, and the verification result is obtained by verification based on the verification information and the first key.

20. The method according to claim 18 or 19, characterized in that The remote attestation report is obtained based on processing by the first module in the first device; The first information further includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

21. The method according to claim 20, characterized in that The third information also includes the first identifier, where the first identifier is used to identify the SIM and / or the first module.

22. The method according to claim 20 or 21, characterized in that The first module is a Trusted Platform Module TPM; or, The first module is a trusted platform control module TPCM; or, The first module is a functional module in the TPM; or, The first module is a functional module in TPCM.

23. A remote attestation method, characterized in that: include: The fourth device receives the third information; The fourth device sends fourth information; The third information is used to request a symmetric key of a subscriber identity module SIM and the fourth information is used to indicate the symmetric key of the SIM, wherein the symmetric key of the SIM is used to process the remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report; or, The third information is used to request a first key and the fourth information is used to indicate the first key; wherein the third information includes a random number, the first key is generated based on the symmetric key of the SIM and the random number, the first key is used to process a remote attestation report to obtain verification information, and the verification information is used to verify the remote attestation report.

24. The method according to claim 23, characterized in that The remote attestation report is obtained based on processing by the first module in the first device; The third information further includes a first identifier, and the first identifier is used to identify the SIM and / or the first module.

25. The method according to claim 24, characterized in that The first module is a Trusted Platform Module TPM; or, The first module is a trusted platform control module TPCM; or, The first module is a functional module in the TPM; or, The first module is a functional module in TPCM.

26. A device, characterized in that including a processing unit and a transceiver unit; The processing unit and the transceiver unit are used to execute the method according to any one of claims 1 to 5; or, The processing unit and the transceiver unit are used to perform the method according to any one of claims 6 to 11; or, The processing unit and the transceiver unit are used to perform the method according to any one of claims 12 to 17; or, The processing unit and the transceiver unit are used to perform the method according to any one of claims 18 to 22; or, The processing unit and the transceiver unit are used to execute the method according to any one of claims 23 to 25.

27. A device, characterized in that: The device comprises at least one processor, wherein the at least one processor is coupled to a memory; the memory is used to store programs or instructions; The at least one processor is used to execute the program or instructions so that the device implements the method as described in any one of claims 1 to 5, or so that the device implements the method as described in any one of claims 6 to 11, or so that the device implements the method as described in any one of claims 12 to 17, or so that the device implements the method as described in any one of claims 18 to 22, or so that the device implements the method as described in any one of claims 23 to 25.

28. A system, characterized in that: comprising at least two of a first device, a second device, a third device and a fourth device; The first device is used to execute the method as claimed in any one of claims 1 to 5, the second device is used to execute the method as claimed in any one of claims 6 to 11 or the second device is used to execute the method as claimed in any one of claims 12 to 17, the first device is used to execute the method as claimed in any one of claims 18 to 22, and the first device is used to execute the method as claimed in any one of claims 23 to 25.

29. A computer-readable storage medium, characterized in that: The medium stores instructions; When the instructions are executed by a computer, the method according to any one of claims 1 to 25 is implemented.

30. A computer program product, characterized in that The computer program product comprises computer instructions; When part or all of the computer instructions are executed on a computer, the method according to any one of claims 1 to 25 is executed.

31. A chip, characterized in that: The chip includes a processor and a communication interface; The communication interface is coupled to the processor, and the processor is used to run a computer program or instruction to implement the method as claimed in any one of claims 1 to 25.

Images