Trusted judgment method and device, trusted system, medium and product

Abstract

The invention provides a credibility judgment method and device, a credibility system, a medium and a product, and relates to the technical field of credibility authentication. The method comprises the following steps: acquiring at least one initial judgment result indicating whether a target object is credible; according to the at least one initial judgment result, generating a final judgment result for judging whether the target object is credible or not; wherein the at least one initial judgment result comprises one or more of the following judgment results: a first judgment result generated based on a program code related to the target object; generating a second judgment result based on a preset feature of an application related to the target object; and the cloud equipment generates a third judgment result based on the target object and a corresponding preset algorithm. According to the scheme, whether three-layer judgment is credible or not is utilized, final credible judgment is made on the target object, and the accuracy of credible judgment is improved.

Description

Technical Field

[0001] The present application relates to the field of trusted authentication technology, and in particular to a trusted decision method, device, trusted system, medium and product. Background Art

[0002] The question that a trusted system needs to answer is whether the key objects of the system are trustworthy. The basis for judging trustworthiness is whether the content of the system is consistent with the expected content. The implementation method of the trusted system in the prior art is to measure the actual hash value of the content specified by the runtime system (generally the program itself, and the code segment at runtime) layer by layer from the bottom layer to see whether it is consistent with the expected hash reference value, so as to determine whether the system has been tampered with. If it has been tampered with, the system is considered untrustworthy. The implementation method of the trusted system in the prior art has the following problems:

[0003] (1) Complex deployment: After each system update, the system needs to refresh the baseline value.

[0004] (2) Object restriction: Generally, only trusted decisions can be made on content that does not change during runtime.

[0005] (3) Poor adaptability: If the current system is old and unreliable, people will still think that the system is trustworthy.

[0006] In summary, the main function of the trusted system in the existing technology is to determine whether a specific part of the system has been tampered with. There is room for improvement in its scalability for partial security judgments on the entire system, flexibility in actual deployment, and adaptability when new judgment bases emerge. Summary of the invention

[0007] The purpose of this application is to provide a trusted decision method, device, trusted system, medium and product to solve the drawbacks of the trusted system in the prior art and improve the accuracy of trusted decision by using three-layer decision.

[0008] In a first aspect, an embodiment of the present application provides a trustworthy decision method, which is applied to a trusted device, including:

[0009] Obtain at least one initial judgment result on whether the target object is trustworthy;

[0010] generating a final judgment result of whether the target object is credible according to the at least one initial judgment result;

[0011] The at least one initial judgment result includes one or more of the following judgment results:

[0012] A first judgment result generated based on a program code related to the target object;

[0013] A second judgment result generated based on a preset feature of an application related to the target object;

[0014] The cloud device generates a third judgment result based on the target object and a corresponding preset algorithm.

[0015] Optionally, before obtaining at least one initial judgment result of whether the target object is trustworthy, the method further includes:

[0016] Periodically or when a preset behavior is triggered, a check instruction sent by the management center is received; the check instruction is used to instruct whether a trustworthy check is performed on the target object.

[0017] Optionally, the target object is determined according to the configuration of a management center connected to the trusted device; the target object includes: a target file, a target code or a target memory.

[0018] Optionally, generating a final judgment result of whether the target object is credible according to the at least one initial judgment result includes:

[0019] Acquire a credible judgment standard for the target object; the credible judgment standard is used to indicate whether the final judgment result is credible;

[0020] According to the trustworthy judgment standard, a final judgment result of whether the target object is trustworthy is generated.

[0021] Optionally, the credible decision criterion includes one of the following:

[0022] When the first judgment result, the second judgment result, and the third judgment result all indicate that the target object is credible, determining that the final judgment result indicates that the target object is credible;

[0023] When one of the first judgment result, the second judgment result and the third judgment result indicates that the target object is credible, determining that the final judgment result indicates that the target object is credible;

[0024] When it is determined according to the first judgment result, the second judgment result and the third judgment result that the target weight value of the final judgment result is greater than a preset weight value, it is determined that the final judgment result indicates that the target object is trustworthy; the target weight value is determined according to the configuration weight values ​​corresponding to the first judgment result, the second judgment result and the third judgment result, respectively.

[0025] Optionally, after generating a final judgment result of whether the target object is credible according to the at least one initial judgment result, the method further includes:

[0026] When the final judgment result indicates that the target object is untrusted, a target instruction is sent to the trusted device and / or the cloud device according to the final judgment result; the target instruction is used to instruct the trusted device and / or the cloud device to respectively execute processing actions after the target object is untrusted.

[0027] In a second aspect, an embodiment of the present application provides a trusted decision device, which is applied to a trusted device, including:

[0028] A first acquisition module is used to acquire at least one initial judgment result of whether the target object is credible;

[0029] A first processing module, configured to generate a final judgment result of whether the target object is credible according to the at least one initial judgment result;

[0030] The at least one initial judgment result includes one or more of the following judgment results:

[0031] A first judgment result generated based on a program code related to the target object;

[0032] A second judgment result generated based on a preset feature of an application related to the target object;

[0033] The cloud device generates a third judgment result based on the target object and a corresponding preset algorithm.

[0034] In a third aspect, an embodiment of the present application provides a trusted system, including:

[0035] A trusted device, used to obtain at least one initial judgment result of whether a target object is trustworthy, and generate a final judgment result of whether the target object is trustworthy based on the at least one initial judgment result; wherein the at least one initial judgment result includes one or more of the following judgment results: a first judgment result generated based on a program code related to the target object; a second judgment result generated based on a preset feature of an application related to the target object; a third judgment result generated by a cloud device based on the target object and a corresponding preset algorithm;

[0036] A management center, connected to the trusted device, configured to determine the target object;

[0037] The cloud device is connected to the trusted device and is used to generate the third judgment result based on the target object.

[0038] In a fourth aspect, an embodiment of the present application provides a readable storage medium having a program or instruction stored thereon, wherein the program or instruction, when executed by a processor, implements the steps in the method described above.

[0039] In a fifth aspect, an embodiment of the present application provides a computer program product, comprising computer instructions, which implement the steps of the method described above when executed by a processor.

[0040] The beneficial effects of the above technical solution of the present application are as follows:

[0041] In the above technical scheme, the method of the present application includes: obtaining at least one initial judgment result of whether the target object is trustworthy; generating a final judgment result of whether the target object is trustworthy based on at least one initial judgment result; wherein the at least one initial judgment result includes one or more of the following judgment results: a first judgment result generated based on the program code related to the target object; a second judgment result generated based on the preset characteristics of the application related to the target object; a third judgment result generated by the cloud device based on the target object and the corresponding preset algorithm. The present application uses at least one of the three layers of judgment to determine whether the target object is trustworthy and makes a final trustworthy judgment on the target object, which improves the accuracy of the trustworthy judgment and simplifies the complexity of the trusted system. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 A flowchart of a trusted decision method applied to a trusted device provided in an embodiment of the present application;

[0043] Figure 2 An overall flow chart of the trusted decision method provided in the embodiment of the present application;

[0044] Figure 3 A structural diagram of a trusted decision device applied to a trusted device provided in an embodiment of the present application;

[0045] Figure 4 A structural diagram of a trusted system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0046] In order to make the technical problems, technical solutions and advantages to be solved by the present application clearer, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.

[0047] It should be understood that the references to "one embodiment" or "an embodiment" throughout the specification mean that the specific features, structures, or characteristics associated with the embodiment are included in at least one embodiment of the present application. Therefore, the references to "in one embodiment" or "in an embodiment" appearing throughout the specification do not necessarily refer to the same embodiment. In addition, these specific features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0048] In the embodiments of the present application, the term "and / or" describes the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B may represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship.

[0049] In the embodiments of the present application, the term "plurality" refers to two or more than two, and other quantifiers are similar.

[0050] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0051] In order to enable those skilled in the art to better understand the embodiments of the present application, the following description is first made:

[0052] A trusted system is a system that uses adequate hardware and software to ensure that it operates in a pre-set and predictable manner. This system uses comprehensive technologies and measures to ensure the predictability and reliability of its behavior, thereby providing a stable and reliable computing environment. Trusted systems not only focus on the normal operation of the system, but also emphasize that the behavior of the system should always achieve the expected goals in the expected way, that is, the system should operate according to the predetermined design and not do anything unexpected. This definition emphasizes that the trustworthiness of the system is not only about the security of the system (untampered software is not necessarily safe), but is the foundation of security, because all security schemes and strategies can only achieve their goals in an untampered environment. The implementation of trusted systems relies on technical means of measurement and verification. By collecting the status of the software or system being tested and comparing it with the reference value, it ensures that the behavior of the system meets the expected design, thereby building a secure and trusted computing environment.

[0053] The embodiments of the present application provide a trusted decision method, device, trusted system, medium and product. The method and device are based on the same application concept. Since the method and device solve the problem in a similar way, the implementation of the device and the method can refer to each other, and the repeated parts will not be repeated.

[0054] Reference Figure 1 As shown, the trust judgment method provided in the embodiment of the present application is applied to a trusted device, including:

[0055] Step 11, obtaining at least one initial judgment result of whether the target object is trustworthy;

[0056] Step 12, generating a final judgment result of whether the target object is credible according to the at least one initial judgment result;

[0057] The at least one initial judgment result includes one or more of the following judgment results:

[0058] A first judgment result generated based on a program code related to the target object;

[0059] A second judgment result generated based on a preset feature of an application related to the target object;

[0060] The cloud device generates a third judgment result based on the target object and a corresponding preset algorithm.

[0061] In an embodiment of the present application, the target object is obtained from a management center connected to a trusted device, and at least one initial judgment result is obtained according to the target object. For example, several specific initial judgment results can be obtained according to the environmental information or application scenario in which the target object is located. The trusted device of the present application is a local device or a local system, in which a local trusted engine and an application trusted engine are provided; the first judgment result is determined by obtaining the program code related to the target object using the local trusted engine. The second judgment result is determined by using the application trusted engine according to the preset features of the application related to the target object. The third judgment result is generated by the cloud device based on the target object, using a preset experience library and an artificial intelligence algorithm to make a trusted judgment on the target object. The present application determines the final judgment result of the target object based on one or more of the first judgment result, the second judgment result and the third judgment result, so as to achieve a trusted judgment on the target object in multiple ways and improve the accuracy of the trusted judgment.

[0062] For example, in a trusted system, the target corresponds to a software, and the local trusted engine can maintain a copy of at least part of the data of the software, the software includes data in an untrusted system; specify selected data from the data contained in the copy as hash data; generate an executable file in the trusted system, the executable file is used to generate a hash based on the hash data; send the executable file from the trusted system to the software in the untrusted system; at the trusted system, execute the executable file to generate a check hash using the selected data as the hash data; and determine whether the software is legitimate based at least in part on a comparison of the check hash with an access hash, the access hash is generated by the software in the untrusted system by executing the executable file, using the selected data from the untrusted system as the hash data, and the access hash is received from the software in the untrusted system. That is, the trusted decision of the local trusted engine can be compared using the hash value to generate a first decision result of the target object.

[0063] For another example, the target object is a target application. The present application can obtain the historical access behavior data of the target application, wherein the historical access behavior data includes: at least one historical access behavior; extracting the behavioral features of each historical access behavior, wherein the behavioral features include: operation features for indicating the operation performed by the subject on the object in the historical access behavior, time features for indicating the time of occurrence of the historical access behavior, object features for indicating the object accessed by the subject in the historical access behavior, and caller features for indicating that the subject is called by other applications in the historical access behavior. The present application defines the behavioral features as preset features of the application related to the target object. Further, the behavioral features of each historical access behavior are respectively mapped into a four-dimensional space, wherein one of the points in the four-dimensional space is used to indicate the behavioral features of one of the historical access behaviors; and the trusted policy corresponding to the target application is obtained based on the four-dimensional space. Through the above-mentioned processing method, the application trusted engine can generate a second judgment result based on the preset features of the application related to the target object.

[0064] For another example, first train an artificial intelligence judgment model, use the artificial intelligence judgment model to make a credible judgment on the target object, and generate the above-mentioned third judgment result. The present application can use a preset experience library to train the artificial intelligence model, and the preset experience library includes multiple test cases of credible judgments.

[0065] Optionally, the cloud device of the present application is configured with an artificial intelligence model running in an untrusted execution environment. During the operation of the business processing task by the cloud device, the artificial intelligence model is run to obtain the data to be processed; the data to be processed includes: the recognition result data of the artificial intelligence model, or the data extracted by the artificial intelligence model; the business processing task is performed using the data to be processed after confirming that the credibility verification result of the artificial intelligence model is credible; the credibility verification result comes from a trusted execution environment; wherein, the method of confirming the credibility verification result includes: during the operation of the business processing task, confirming the credibility verification result read from the trusted execution environment in the untrusted execution environment to confirm that the running artificial intelligence model is credible; or sending the credibility verification result to the server device in the business processing system for the server device to confirm the credibility verification result; the credibility verification result is related to the version of the artificial intelligence model; or the credibility verification result has an expiration date.

[0066] Optionally, the trusted device used in the method of the present application includes at least a local trusted engine and an application trusted engine, the application trusted engine and the local trusted engine are deployed on the same system, and the central trusted engine of the cloud device can also be deployed in the same system; or, the local trusted engine and the application trusted engine in the trusted device are deployed in the same local system, and the cloud device is deployed in a remote system.

[0067] Optionally, before obtaining at least one initial judgment result of whether the target object is trustworthy, the method further includes:

[0068] Periodically or when a preset behavior is triggered, a check instruction sent by the management center is received; the check instruction is used to instruct whether a trustworthy check is performed on the target object.

[0069] It should be noted that the trusted judgment timing can be configured or pre-configured in the management center. For example, the implementation method of the trusted judgment timing may include: the management center can periodically send inspection instructions to the trusted device and the cloud device, or send inspection instructions to the trusted device and the cloud device when a specific scenario is triggered. Specific scenarios such as when the target object is a target file, security verification is required when the target file is damaged; or when the target object is a target code, a risk prompt appears when the target code is illegally attacked; or when the target object is detected as a target memory, the target memory is attacked by a large file download, etc.

[0070] In an embodiment of the present application, the trusted device receives an inspection instruction sent by the management center periodically or when a preset behavior is triggered, and uses the inspection instruction to inspect the target object to generate a first judgment result and a second judgment result for the trustworthiness of the target object.

[0071] Optionally, the target object is determined according to the configuration of a management center connected to the trusted device; the target object includes: a target file, a target code or a target memory.

[0072] In this application, the target object can be configured by the management center, and the trusted object can be set through the system tool or the application itself. The specified file, specified code or specified memory is set as the target object, and the target object is trusted and monitored.

[0073] Optionally, generating a final judgment result of whether the target object is credible according to the at least one initial judgment result includes:

[0074] Acquire a credible judgment standard for the target object; the credible judgment standard is used to indicate whether the final judgment result is credible;

[0075] According to the trustworthy judgment standard, a final judgment result of whether the target object is trustworthy is generated.

[0076] It should be noted that the trusted decision standard is also configured or pre-configured by the management center.

[0077] In an embodiment of the present application, a trusted decision standard for the target object is obtained from the management center. For example, the trusted decision standard corresponding to the scene information can be selected based on the scene information of the target object. For example, the scene information is divided into a first priority and a second priority according to the security priority, the first priority is higher than the second priority, and the trusted decision standard corresponding to the first priority is different from the trusted decision standard of the second priority. The trusted decision standard corresponding to the first priority needs to use the first, second and third judgment results and the second to generate a final judgment result of whether the target object is trustworthy. If the application scenario corresponding to the target is the second priority, one or more of the first, second and third judgment results can be selected to generate a final judgment result of whether the target object is trustworthy.

[0078] Further, the credible decision standard includes one of the following:

[0079] Method 1: when the first judgment result, the second judgment result and the third judgment result all indicate that the target object is credible, determining that the final judgment result indicates that the target object is credible;

[0080] Method 2: when one of the first judgment result, the second judgment result and the third judgment result indicates that the target object is credible, determining that the final judgment result indicates that the target object is credible;

[0081] Method three: when it is determined, based on the first judgment result, the second judgment result and the third judgment result, that the target weight value of the final judgment result is greater than a preset weight value, it is determined that the final judgment result indicates that the target object is trustworthy; the target weight value is determined based on the configuration weight values ​​corresponding to the first judgment result, the second judgment result and the third judgment result, respectively.

[0082] In the embodiment of the present application, in method 1, when the first judgment result, the second judgment result, and the third judgment result all indicate that they are credible, it is determined that the final judgment result indicates that the target object is credible, and when any one of the results is untrustworthy, it is determined that the final judgment result indicates that the target object is untrustworthy. Method 1 of the present application requires a higher priority, and when the above-mentioned target object is the first priority, the credible judgment standard adopts method 1.

[0083] In the second method, when there is one indication of credibility among the first judgment result, the second judgment result and the third judgment result, it is determined that the final judgment result indicates that the target object is credible. If the results of the three are all untrustworthy, it is determined that the final judgment result indicates that the target object is untrustworthy. In the third method, the weight of each layer of the trusted configuration is set, for example, the weight of the first judgment result is 30%, the weight of the second judgment result is 30%, the weight of the third judgment result is 40%, and the sum of the three weights is 100%. And based on the first judgment result, the second judgment result and the third judgment result, the target weight value of the final judgment result is determined, and the target weight value is compared with the preset weight value set in this application. When the target weight value is greater than the preset weight value, it is determined that the final judgment result indicates that the target object is credible. When the above-mentioned target object is of the second priority, the credible judgment standard can adopt method one or method two.

[0084] Optionally, after generating a final judgment result of whether the target object is credible according to the at least one initial judgment result, the method further includes:

[0085] When the final judgment result indicates that the target object is untrusted, a target instruction is sent to the trusted device and / or the cloud device according to the final judgment result; the target instruction is used to instruct the trusted device and / or the cloud device to respectively execute processing actions after the target object is untrusted.

[0086] In the embodiment of the present application, when the final judgment result indicates that the target object is untrustworthy, the final judgment result can be determined by using several layers of judgment results. If it is determined by only one layer of judgment results, the target instruction can be sent to only that layer to perform the corresponding dishonesty processing. If the final judgment result is determined by two or three layers, it is necessary to send a target instruction to each layer separately, instructing the local trusted engine, application trusted engine and / or cloud device in the trusted device to respectively perform the processing actions after the target object is untrustworthy.

[0087] Reference Figure 2 The specific implementation method shown, the three-layer judgment trusted processing method proposed in this application can flexibly specify system objects, and enhance the capabilities of the trusted system by applying a three-layer judgment method of a trusted engine, a local trusted engine, and a central trusted engine. The application trusted engine and the local trusted engine can be set in the same local device (trusted device).

[0088] In summary, this method can improve the flexibility, scalability and adaptability of the program:

[0089] (1) Flexible deployment: Deployment and judgment are separated, which facilitates rapid deployment. After the system object is upgraded or changed, there is no need to refresh the baseline value saved by the trusted system every time.

[0090] (2) Wide adaptability: The judgment basis is dynamically updated, and a system that was originally trustworthy but should be judged as untrustworthy after a vulnerability is discovered can be judged in a timely manner, thereby improving security.

[0091] (3) Strong scalability: Trusted monitoring and judgment can be performed on all objects in the system (such as dynamic memory), not just trusted judgments on objects that cannot be tampered with.

[0092] Reference Figure 3 As shown, the embodiment of the present application also provides a trusted decision device, which is applied to a trusted device, including:

[0093] A first acquisition module 31 is used to acquire at least one initial judgment result of whether the target object is credible;

[0094] A first processing module 32, configured to generate a final judgment result of whether the target object is credible according to the at least one initial judgment result;

[0095] The at least one initial judgment result includes one or more of the following judgment results:

[0096] A first judgment result generated based on a program code related to the target object;

[0097] A second judgment result generated based on a preset feature of an application related to the target object;

[0098] The cloud device generates a third judgment result based on the target object and a corresponding preset algorithm.

[0099] Optionally, the trusted decision device in the present application further includes:

[0100] The first receiving module is used to receive a check instruction sent by the management center periodically or when a preset behavior is triggered; the check instruction is used to instruct whether a trustworthy check is performed on the target object.

[0101] Optionally, the target object is determined according to the configuration of a management center connected to the trusted device; the target object includes: a target file, a target code or a target memory.

[0102] In the present application, the first processing module 32 includes:

[0103] A first acquisition unit is used to acquire a trustworthy judgment standard of the target object; the trustworthy judgment standard is used to indicate whether the final judgment result is trustworthy;

[0104] The first processing unit is used to generate a final judgment result of whether the target object is trustworthy according to the trustworthy judgment standard.

[0105] Optionally, the credible decision criterion includes one of the following:

[0106] When the first judgment result, the second judgment result, and the third judgment result all indicate that the target object is credible, determining that the final judgment result indicates that the target object is credible;

[0107] When one of the first judgment result, the second judgment result and the third judgment result indicates that the target object is credible, determining that the final judgment result indicates that the target object is credible;

[0108] When it is determined according to the first judgment result, the second judgment result and the third judgment result that the target weight value of the final judgment result is greater than a preset weight value, it is determined that the final judgment result indicates that the target object is trustworthy; the target weight value is determined according to the configuration weight values ​​corresponding to the first judgment result, the second judgment result and the third judgment result, respectively.

[0109] Optionally, the trusted decision device in the present application further includes:

[0110] A second processing module is used to send a target instruction to the trusted device and / or the cloud device according to the final judgment result when the final judgment result indicates that the target object is untrusted; the target instruction is used to instruct the trusted device and / or the cloud device to respectively execute processing actions after the target object is untrusted.

[0111] Among them, the implementation embodiments of the above-mentioned trusted decision method are all applicable to the embodiments of the trusted decision device and can achieve the same technical effects.

[0112] Reference Figure 4 As shown, the embodiment of the present application also provides a trusted system, including:

[0113] The trusted device 40 is used to obtain at least one initial judgment result of whether the target object is trustworthy, and generate a final judgment result of whether the target object is trustworthy based on the at least one initial judgment result; wherein the at least one initial judgment result includes one or more of the following judgment results: a first judgment result generated based on a program code related to the target object; a second judgment result generated based on a preset feature of an application related to the target object; a third judgment result generated by a cloud device based on the target object and a corresponding preset algorithm;

[0114] A management center 50, connected to the trusted device, configured to determine the target object;

[0115] The cloud device 60 is connected to the trusted device and is used to generate the third judgment result based on the target object.

[0116] Optionally, the trusted device 40 includes: a local trusted engine 41, used to obtain the business object to generate the first judgment result; and an application trusted engine 42, used to obtain the business object to generate the second judgment result.

[0117] The processing processes of the local trusted engine 41, the application trusted engine 42 and the cloud device 60 are independently determined and processed.

[0118] Optionally, the local trusted engine 41, the application trusted engine 42 and the cloud device 60 in the trusted device 40 are integrated and deployed in the same local system; or, the local trusted engine 41 and the application trusted engine 42 in the trusted device 40 are deployed in the same local system, and the cloud device 60 is deployed in a remote system.

[0119] This application proposes a three-layer trusted system that can flexibly specify system objects. By using the three-layer judgment method of application trusted engine, local trusted engine and central trusted engine, the capabilities of the trusted system can be improved: (1) Trusted objects can be set through system tools or the application itself. (2) Specified files, specified codes or specified memory objects can be set for trusted monitoring. (3) Periodicity can be set to trigger trusted checks when tasks are switched or specified operations (system calls, reading and writing files) are performed. (4) Trusted judgments can be set through applications, local or central trusted engines. (5) Untrusted behavior processing can be set through applications, local or central breach of trust processing modules.

[0120] The trusted system of the present application can perform trusted monitoring on designated objects: make trusted decisions by monitoring the state and content of the object. Obtain the trusted decision results of the application, local or central trusted engine. And calculate the comprehensive weight value. The trusted decision timing can be specified as periodic or triggered by key behaviors. The trusted system of the present application, according to the configuration, triggers the execution of the processing action of the business object breach of trust if the comprehensive judgment shows that the business object is untrustworthy.

[0121] The trusted system of the present application can execute the above-mentioned trusted decision method, which has the following effects:

[0122] (1) Flexible deployment: Deployment and judgment are separated, which facilitates rapid deployment. After the system object is upgraded or changed, there is no need to refresh the baseline value saved by the trusted system every time.

[0123] (2) Wide adaptability: The judgment basis is dynamically updated, and a system that was originally trustworthy but should be judged as untrustworthy after a vulnerability is discovered can be judged in a timely manner, thereby improving security.

[0124] (3) Strong scalability: Trusted monitoring and judgment can be performed on all objects in the system (such as dynamic memory), not just trusted judgments on objects that cannot be tampered with.

[0125] A readable storage medium in an embodiment of the present application stores a program or instruction thereon. When the program or instruction is executed by a processor, the steps in the trusted decision method as described above are implemented and the same technical effect can be achieved. To avoid repetition, it will not be described here.

[0126] The processor is the processor in the trusted decision method described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0127] The present application also provides a computer program product, including computer instructions, which, when executed by a processor, implement the above Figure 1 or Figure 2 The various processes of the method embodiment shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0128] In the embodiment of the present application, module can be implemented with software so that it can be performed by various types of processors. For example, an executable code module of an identification can include one or more physical or logical blocks of computer instructions, for example, it can be constructed as an object, process or function. Nevertheless, the executable code of the identified module does not need to be physically located together, but can include different instructions stored in different locations, and when these instructions are logically combined together, it constitutes a module and realizes the specified purpose of the module.

[0129] In fact, executable code module can be a single instruction or many instructions, and can even be distributed on a plurality of different code segments, distributed among different programs, and distributed across a plurality of memory devices. Similarly, operating data can be identified in the module, and can be implemented and organized in the data structure of any appropriate type according to any appropriate form. The operating data can be collected as a single data set, or can be distributed in different locations (including on different storage devices), and can only be present on a system or network as an electronic signal at least in part.

[0130] When a module can be implemented by software, considering the level of existing hardware technology, a person skilled in the art can build a corresponding hardware circuit to implement the corresponding function of the module that can be implemented by software without considering the cost. The hardware circuit includes a conventional very large scale integration (VLSI) circuit or gate array and existing semiconductors such as logic chips, transistors, or other discrete components. The module can also be implemented by a programmable hardware device, such as a field programmable gate array, a programmable array logic, a programmable logic device, etc.

[0131] The above exemplary embodiments are described with reference to the accompanying drawings, and many different forms and embodiments are feasible without departing from the spirit and teachings of the present application. Therefore, the present application should not be constructed as a limitation of the exemplary embodiments proposed herein. More specifically, these exemplary embodiments are provided so that the present application will be perfect and complete, and the scope of the present application will be conveyed to those who are familiar with the technology. In these figures, the component sizes and relative sizes may be exaggerated for clarity. The terms used here are only based on the purpose of describing specific exemplary embodiments and are not intended to be limiting. As used herein, unless the text clearly indicates otherwise, the singular forms "one", "an" and "the" are intended to include these multiple forms. It will be further understood that the terms "comprising" and / or "including" when used in this specification indicate the presence of the features, integers, steps, operations, components and / or components, but do not exclude the presence or increase of one or more other features, integers, steps, operations, components, components and / or their groups. Unless otherwise indicated, when stated, a range of values ​​includes the upper and lower limits of that range and any subranges therebetween.

[0132] The above is a preferred embodiment of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles described in the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A trusted decision method, applied to a trusted device, characterized in that: include: Obtain at least one initial judgment result on whether the target object is trustworthy; generating a final judgment result of whether the target object is credible according to the at least one initial judgment result; The at least one initial judgment result includes one or more of the following judgment results: A first judgment result generated based on a program code related to the target object; A second judgment result generated based on a preset feature of an application related to the target object; The cloud device generates a third judgment result based on the target object and a corresponding preset algorithm.

2. The method according to claim 1, characterized in that Before obtaining at least one initial judgment result of whether the target object is credible, the method further includes: Periodically or when a preset behavior is triggered, a check instruction sent by the management center is received; the check instruction is used to instruct whether a trustworthy check is performed on the target object.

3. The method according to claim 1, characterized in that The target object is determined according to the configuration of the management center connected to the trusted device; the target object includes: a target file, a target code or a target memory.

4. The method according to claim 1, characterized in that: Generating a final judgment result of whether the target object is credible according to the at least one initial judgment result includes: Acquire a credible judgment standard for the target object; the credible judgment standard is used to indicate whether the final judgment result is credible; According to the trustworthy judgment standard, a final judgment result of whether the target object is trustworthy is generated.

5. The method according to claim 4, characterized in that The credible judgment standard includes one of the following: When the first judgment result, the second judgment result, and the third judgment result all indicate that the target object is credible, determining that the final judgment result indicates that the target object is credible; When one of the first judgment result, the second judgment result and the third judgment result indicates that the target object is credible, determining that the final judgment result indicates that the target object is credible; When it is determined according to the first judgment result, the second judgment result and the third judgment result that the target weight value of the final judgment result is greater than a preset weight value, determining that the final judgment result indicates that the target object is credible; The target weight value is determined according to the configuration weight values ​​corresponding to the first judgment result, the second judgment result and the third judgment result respectively.

6. The method according to claim 1, characterized in that After generating a final judgment result of whether the target object is credible according to the at least one initial judgment result, the method further includes: When the final judgment result indicates that the target object is untrusted, a target instruction is sent to the trusted device and / or the cloud device according to the final judgment result; the target instruction is used to instruct the trusted device and / or the cloud device to respectively execute processing actions after the target object is untrusted.

7. A trusted decision device, applied to a trusted device, characterized in that: include: A first acquisition module is used to acquire at least one initial judgment result of whether the target object is credible; A first processing module, configured to generate a final judgment result of whether the target object is credible according to the at least one initial judgment result; The at least one initial judgment result includes one or more of the following judgment results: A first judgment result generated based on a program code related to the target object; A second judgment result generated based on a preset feature of an application related to the target object; The cloud device generates a third judgment result based on the target object and a corresponding preset algorithm.

8. A trusted system, characterized in that: include: A trusted device, used to obtain at least one initial judgment result of whether a target object is trustworthy, and generate a final judgment result of whether the target object is trustworthy based on the at least one initial judgment result; wherein the at least one initial judgment result includes one or more of the following judgment results: a first judgment result generated based on a program code related to the target object; a second judgment result generated based on a preset feature of an application related to the target object; a third judgment result generated by a cloud device based on the target object and a corresponding preset algorithm; A management center, connected to the trusted device, configured to determine the target object; The cloud device is connected to the trusted device and is used to generate the third judgment result based on the target object.

9. A readable storage medium having a program or instruction stored thereon, characterized in that: When the program or instruction is executed by a processor, the steps in the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The method comprises computer instructions, which, when executed by a processor, implement the steps of the method according to any one of claims 1 to 6.

Images