Auxiliary heterogeneous remote authentication method and system with blind verification function

Abstract

According to the auxiliary heterogeneous remote authentication method and system with the blind verification function provided by the invention, each TEE platform completes remote certification with an opposite end by means of the remote certification agent module, and each TEE platform does not need to be compatible with authentication logic of other heterogeneous TEE platforms. According to the method, privacy calculation of interaction between heterogeneous TEEs is supported, an RSA blind signature technology is integrated, anonymity and safety are provided, an additional safety layer is provided for interaction between nodes through combination, and safety and reliability of network communication are enhanced; therefore, not only is the security ensured, but also anonymous support is provided for node interaction between heterogeneous TEEs.

Description

Technical Field

[0001] The present invention belongs to the field of information security technology, and in particular relates to an auxiliary heterogeneous remote authentication method and system with a blind verification function. Background Art

[0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art.

[0003] In recent years, with the rapid development of information technology, fields such as cloud computing, the Internet of Things, and blockchain are facing problems such as device authentication, data security, and the credibility of computing processes. In order to meet these challenges, the field of cryptography is working to improve the performance and security of remote authentication technology.

[0004] Remote attestation technology provides a powerful mechanism that can establish the security and trustworthiness of remote devices in a variety of network environments. As a core technology in the field of trusted computing, remote attestation enables the trusting party to verify the internal status of remote and untrusted devices. This process is usually completed based on the security foundation of the Trusted Execution Environment (TEE).

[0005] TEE constitutes the basic hardware environment for privacy computing. It creates a secure area in a potentially insecure system, specifically for performing sensitive operations and storing sensitive data. There are many TEE implementations on the market, developed by different hardware manufacturers, including well-known Intel SGX, AMD SEV, ARM TrustZone, and domestic technologies such as Haiguang, Zhaoxin, Kunpeng and Feiteng. This diversity has promoted the prosperity of the market, but it has also caused several challenges: Currently, the industry has not yet formed a unified set of technical specifications for TEE. This lack of standardization makes it difficult to achieve seamless compatibility between TEEs from different manufacturers. This fragmentation not only increases development costs and complexity, but may also have an adverse impact on the performance and efficiency of privacy computing applications. In order to promote the widespread application of privacy computing, it is urgent to establish a unified cross-platform standard, which will help simplify the development process and enhance the interoperability of TEE applications, thereby improving overall efficiency.

[0006] Although some emerging privacy computing systems have recently begun to focus on the collaborative work of heterogeneous TEE computing power in the system, they often ignore the security issues in the TEE interaction process when designing the solution. Such negligence may make the system vulnerable to security threats such as man-in-the-middle attacks. Summary of the invention

[0007] In order to solve the above problems, the present invention proposes an auxiliary heterogeneous remote authentication method and system with blind verification function. The present invention supports privacy computing for interaction between heterogeneous TEEs and also incorporates RSA blind signature technology to provide anonymity and security. This combination provides an additional security layer for interaction between nodes and enhances the security and reliability of network communications. It not only ensures security, but also provides anonymity support for node interaction between heterogeneous TEEs.

[0008] According to some embodiments, the present invention adopts the following technical solutions: An auxiliary heterogeneous remote authentication method with blind verification function comprises the following steps: The heterogeneous TEE platform requests node registration from the remote attestation agent module, and obtains the AK certificate generated by the remote attestation agent module after successful registration; The challenger initiates a remote verification request to the party to be authenticated. The request contains an encrypted random string nonce value. The authenticator first decrypts the nonce value, generates a local report, generates a blind message for the local report and the nonce value, generates a signature for the blind message and the AK certificate, and sends the signature and the blind message to the remote attestation agent module to request the remote attestation agent module to endorse the local report and issue a remote attestation response message; The remote verification agent module verifies the received signature, confirms the legitimacy of the requesting node, and calls the corresponding verification logic according to the TEE type to verify the received local report, generates the authentication result, blindly signs the blinded message with the private key, and returns the blind signature and authentication result to the party to be authenticated; After the authenticator verifies the returned blind signature and confirms that the message value is consistent with what it has, it forwards the received blind signature, authentication result and local report to the challenging party; The challenger checks the received blind signature, authentication result, and local report, and confirms that the nonce value has not been tampered with, completing the authentication.

[0009] As an optional implementation, each TEE platform uses the remote attestation agent module to complete remote attestation with the other end, and each TEE platform does not need to be compatible with the authentication logic of other heterogeneous TEE platforms.

[0010] As an optional implementation, the process of the heterogeneous TEE platform requesting node registration from the remote attestation agent module includes: the heterogeneous TEE node generates a pair of AK public and private keys for authenticating the identity to the remote attestation agent module and a shared key to be exchanged; The heterogeneous TEE node provides its own identity information, shared key and AK public key to the remote authentication agent module; The heterogeneous TEE node obtains the root certificate of the remote authentication agent module, the shared key of other nodes, and the AK certificate used for remote authentication.

[0011] As an optional implementation, the process of heterogeneous TEE nodes generating a pair of AK public-private keys for authenticating the identity to the remote authentication agent module and the key to be exchanged includes: the first heterogeneous TEE node generates a pair of public-private keys for authenticating the identity to the remote authentication agent module and a shared secret key for Diffie-Hellman (DH) key exchange , the second heterogeneous TEE node generates a public-private key pair and a shared key , the remote authentication agent module generates a public-private key pair , the public key of the blind signature , private key d and root certificate ,in , p and q are large prime numbers, g is a generator, is the number of positive integers less than N and coprime with N, are large integers respectively, n is the product of p and q, e is the encrypted prime number, e and n are mutually prime, and d is the decrypted prime number; The two heterogeneous TEE nodes send their ID information, AK public key and shared key to the remote verification agent module respectively, requesting node registration.

[0012] As an optional implementation method, during the node registration process, after receiving the request, the remote authentication agent module generates an AK certificate based on the AK public key. and , corresponding to the first heterogeneous TEE node and the second heterogeneous TEE node respectively; The remote authentication agent module will issue the AK certificate for the first heterogeneous TEE node , the shared key of other nodes , RSA blind signature public key (n, e) and your local root certificate Sent to the first heterogeneous TEE node together, and the AK certificate issued for the second heterogeneous TEE node , the shared key of other nodes , RSA blind signature public key (n, e) and your local root certificate Sent together to the second heterogeneous TEE node.

[0013] As an optional implementation method, the challenger initiates a remote verification request to the party to be authenticated, and the process of including the encrypted random string nonce value in the request includes: the challenger generates a random string nonce, and uses the DH key to convert the nonce into Encrypt and get Sent to the party to be authenticated, where .

[0014] As an optional implementation, the party to be authenticated uses the key calculated by itself Decrypt c to get the random string nonce, generate a local report report that matches your TEE node type, and use the RSA blind signature scheme to blind the random string nonce to get a blinded message ,in means randomly selecting an element R from the multiplication group modulo N, yes The set of all elements in that are coprime to N, and Then represents the integer ring modulo N, that is, the set of integers, For the hash function, use your own Generate signature ,sign Contents include: ,TEE type, And node ID information , construct a remote attestation request ,Include ,TEE type, , , report and signature , the request Sent to the remote verification agent module to request the remote verification agent module to endorse the local report and give a remote proof response message.

[0015] As an optional implementation, the remote verification agent module calls the corresponding verification logic according to the TEE type to verify the received local report, generates an authentication result, and uses the private key to blindly sign the blinded message. The process includes: the remote verification agent module receives the request Then, use the public key of the party to be authenticated Verify the signature , confirm the legitimacy of the TEE node to be authenticated, and then call the corresponding verification interface according to the TEE type to obtain the authentication result of the report, using the private key PrivRK of the remote authentication agent module, the authentication result result, and the blinded message And report generates an authentication certificate attest, and then uses the RSA blind signature private key d stored locally in the remote verification agent module to blind the message Sign and get the blind signature message , construct the remote proof response message , including: attest and , the Validator will Sent to the TEE node of the party to be authenticated.

[0016] As an optional implementation, the party to be authenticated receives the remote attestation response message , use the public key PubRK of the remote verification proxy module to verify the authentication certificate attest, then call the deblinding algorithm and verify it with the blind signature public key (n,e) Is it true? After confirming that the message has not been tampered with, and report forwarded to the challenging party; Challenge Extract the blind signature message , use the public key PubRK of the remote authentication proxy module to verify the authentication proof attest, confirm that the signature has not been tampered with, and verify and deblind the algorithm based on the received report and the locally stored nonce value Whether they are consistent, the verification is passed, and the remote proof to the authenticator is completed.

[0017] An auxiliary heterogeneous remote authentication system with blind verification function, comprising: The TEE platform of the challenging party is used to initiate a remote verification request to the TEE platform of the party to be authenticated. The request contains an encrypted random string nonce value, and checks the received blind signature, authentication result and local report, and confirms that the nonce value has not been tampered with to complete the authentication; The TEE platform of the party to be authenticated is used to decrypt the nonce value, generate a local report, generate a blind message for the local report and the nonce value, generate a signature for the blind message and the AK certificate, and send the signature and the blind message to the remote attestation agent module to request the remote attestation agent module to endorse the local report and give a remote attestation response message; verify the returned blind signature, confirm that the message value is consistent with what it has, and then forward the received blind signature, authentication result and local report to the TEE platform of the challenging party; The remote verification agent module is used to verify the received signature, confirm the legitimacy of the requesting node, and call the corresponding verification logic to verify the received local report according to the TEE type, generate the authentication result, blindly sign the blinded message with the private key, and return the blind signature and authentication result to the party to be authenticated.

[0018] Compared with the prior art, the present invention has the following beneficial effects: The present invention provides a novel method for remote attestation between heterogeneous TEEs. Based on this design, heterogeneous TEEs implement remote attestation by first registering nodes and then having them authenticated by a third party. This not only supports seamless collaboration between heterogeneous TEEs, but also ensures data security and privacy through Diffie-Hellman key exchange and blind signatures. The present invention designs a remote attestation method based on blind signatures that supports node interaction between heterogeneous TEEs, which can more safely perform remote attestation between different architectures, hide random string nonce values, and prevent man-in-the-middle attacks. In order to make the above-mentioned purposes, features, and advantages of the present invention more obvious and easy to understand, the following is a detailed description of the preferred embodiments in conjunction with the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The accompanying drawings in the specification, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0020] Figure 1 A schematic diagram of a method for actual interaction of heterogeneous TEE nodes provided by an embodiment of the present invention; Figure 2 is an overall flow chart of an embodiment of the present invention; Figure 3 It is an overall framework diagram of an embodiment of the present invention; Figure 4 This is a flowchart of heterogeneous TEE remote attestation interaction in an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

[0022] It should be noted that the following detailed descriptions are all illustrative and intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meanings as those commonly understood by those skilled in the art to which the present invention belongs.

[0023] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit exemplary embodiments according to the present invention. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "comprising" and / or "including" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0024] In the absence of conflict, the embodiments in this application and the features in the embodiments may be combined with each other.

[0025] Embodiment 1 An auxiliary heterogeneous remote authentication method with a blind verification function includes a remote proof agent module, a node registration mechanism, and a bidirectional proof mechanism of heterogeneous TEE nodes based on blind signatures.

[0026] First, the interaction process of each heterogeneous TEE platform is as follows Figure 1 As shown. The heterogeneous TEE platforms of this embodiment interact with each other through the remote attestation proxy module. The remote attestation proxy module, namely Validator, is a key component of the privacy computing system. It is independent of other parts of the system. The proxy module converges all remote attestation differentiation logics. The design purpose of the proxy module is to uniformly handle all differentiation logics related to remote attestation. In this way, the remote attestation proxy module acts as an intermediary, responsible for coordinating and simplifying the remote attestation process between different TEE platforms. Other TEE platforms use the remote attestation proxy module to complete remote attestation with the other end, so that each TEE platform does not need to be particularly compatible with the authentication logic of heterogeneous TEE.

[0027] In this embodiment, the node registration mechanism is to ensure that heterogeneous TEE nodes can securely access the system and obtain certificates from the remote verification agent module. The following are the specific steps of the node registration mechanism: Step 1: The heterogeneous TEE node first generates a pair of AK public and private keys for authenticating the identity to the remote authentication agent module and a shared key to be exchanged; Step 2: The heterogeneous TEE node provides its own identity information, shared key and AK public key to the remote authentication agent module; Step 3: The heterogeneous TEE node obtains the root certificate of the remote authentication agent module, the shared key of other nodes, and the AK certificate used for remote authentication.

[0028] Next, the two-way proof mechanism of heterogeneous TEE nodes based on blind signatures is explained in detail.

[0029] First, the heterogeneous TEE remote verification mechanism is explained. The basic process includes: Step 1: The challenger first initiates an authentication request to the node to be authenticated; Step 2: The TEE platform to be authenticated generates a unique TEE authentication report based on its own TEE technology; Step 3: Return the certification report to the challenger; Step 4: The challenger performs verification of the certification report based on the TEE technology type of the platform to be certified.

[0030] Specifically, in this embodiment, if Figure 3As shown, based on the classic challenge-response protocol framework, for heterogeneous TEE environments, the logic of generating and verifying reports can be flexibly adjusted according to the specific requirements of different TEE technologies, ensuring the versatility and adaptability of the method.

[0031] In this embodiment, the bidirectional proof mechanism of heterogeneous TEE nodes based on blind signatures includes: Step 1: The challenger initiates a remote verification request to the party to be authenticated. The request contains an encrypted random string nonce value. Step 2: The authenticator first decrypts the nonce value, regenerates the local report, generates a blind message for the local report and the nonce value, and then generates a signature for the blind message and the AK certificate, etc., and sends the signature and the blind message to the remote attestation agent module, so as to request the remote attestation agent module to endorse the local report and give a remote attestation response message; Step 3: The remote verification agent module verifies the received signature and confirms the legitimacy of the requesting node. Then, according to the TEE type, it calls the corresponding verification logic to verify the received local report, generates the authentication result, and then uses the private key to blindly sign the blinded message. Finally, the blind signature and authentication result are returned to the party to be authenticated. Step 4: The authenticator verifies the returned blind signature and confirms that the message value is consistent with the one it has, and then forwards the received blind signature, authentication result and local report to the challenger; Step 5: The challenger checks the received blind signature, etc., and confirms that the nonce value, etc. has not been tampered with, completing the authentication.

[0032] In order to make the specific scheme clearer to those skilled in the art, this embodiment is explained by taking the interaction of SGX nodes and Haiguang nodes as heterogeneous TEE platform nodes as an example.

[0033] Of course, the method provided in this embodiment can support TEE technology released by mainstream computing chip manufacturers, including domestic Haiguang, domestic Zhaoxin, domestic Feiteng, domestic Kunpeng, Intel, AMD, ARM, etc., and is not limited to the above examples.

[0034] like Figure 4 As shown in the figure, the specific process of node registration includes the following steps: Step A1: The SGX node generates a public-private key pair to verify its identity to the Validator and a shared secret key for DH key exchange , Haiguang node generates a public and private key pair and a shared key , Validator generates a public-private key pair , the public key of the blind signature , private key d and root certificate root.cert, (where g is a generator, , is a large integer; is a large prime number; the root certificate is generated using the OpenSSL tool and follows the X.509 standard format); Step A2: The SGX node and the Haiguang node send the ID information, AK public key and shared key to the Validator respectively, requesting node registration; Step A3: After receiving the request, the Validator generates an AK certificate based on the AK public key and , corresponding to SGX nodes and Haiguang nodes respectively (AK certificates are generated using OpenSSL tools and follow the X.509 standard format); Step A4: Validator will issue the AK certificate for the SGX node , the shared keys of other existing nodes , RSA blind signature public key (n, e) and your local root certificate Sent to SGX node together, AK certificate will be issued for Haiguang node , the shared keys of other existing nodes , RSA blind signature public key (n, e) and your local root certificate Send them to the Haiguang node together; Step A5: The SGX node and the Haiguang node save the corresponding certificates and shared keys respectively, and calculate the DH key , for use in the remote attestation process; In this embodiment, two-way remote authentication is a process in which two heterogeneous TEE nodes remotely authenticate each other, similar to TLS two-way authentication. Taking the one-way authentication of the Haiguang node to verify the SGX node as an example, the specific process of one-way remote authentication includes the following steps: Step B1: As a challenger, the Haiguang node initiates remote proof to the SGX node, generates a random string nonce, and uses the DH key to Encrypt and get Send to SGX node; Step B2: The SGX node first uses its own DH key Decrypt c to get the random string nonce, then generate a local report of Intel SGX type, and use the RSA blind signature scheme to blind the random string nonce to get the blinded message ,in , and then use your own Generate signature ,sign Contents include: ,TEE type, And node ID information , and finally construct the remote attestation request ,Include ,TEE type, , , report and signature , the request Sent to the Validator to request the Validator to endorse the local report and give a remote proof response message (where It is a hash function that can accept input data of any length and produce an output string of fixed length); Step B3: Validator receives the request After that, first use the SGX public key Verify the signature , confirm the legitimacy of the node SGX, and then call the corresponding SGX verification interface according to the TEE type to obtain the authentication result of the report, using the Validator's private key PrivRK, the authentication result, and the blinded message And report generates an authentication certificate attest (in the form of a signature), and then uses the RSA blind signature private key d stored locally in the Validator to blind the message Sign and get the blind signature message , and finally construct the remote proof response message , including: attest and , the Validator will Send to SGX node; Step B4: SGX node receives remote attestation response message , use the Validator's public key PubRK to verify the authentication proof attest, then call the deblinding algorithm and verify it with the blind signature public key (n,e) Is it true? After confirming that the message has not been tampered with, And report forwarded to the Haiguang node; Step B5: Haiguang node from Extract the blind signature message , also uses the Validator's public key PubRK to verify the authentication proof attest, confirming that the signature has not been tampered with, and then verifies and deblinds the algorithm based on the received report and the locally stored nonce value. If the verification is successful, the remote attestation of the SGX node can be completed.

[0035] In this embodiment, the process of SGX node verifying Haiguang node is basically the same as that of Haiguang node verifying SGX node. The only difference lies in the node generating local report and the Validator verifying report. For Haiguang node, the generated report is in Haiguang's unique format, and the Validator will verify according to Haiguang's verification logic during verification.

[0036] In summary, the solution of this embodiment can provide: Remote attestation between heterogeneous TEEs: This method can be integrated into existing systems and operate across TEE platforms with different architectures, ensuring wide applicability. Secure remote attestation interaction: This method can hide the nonce value and resist various network attacks such as man-in-the-middle attacks and replay attacks. It can provide users with a fast and secure remote attestation method between heterogeneous TEEs in more fields such as the Internet of Things.

[0037] Embodiment 2 An auxiliary heterogeneous remote authentication system with blind verification function, comprising: The TEE platform of the challenging party is used to initiate a remote verification request to the TEE platform of the party to be authenticated. The request contains an encrypted random string nonce value, and checks the received blind signature, authentication result and local report, and confirms that the nonce value has not been tampered with to complete the authentication; The TEE platform of the party to be authenticated is used to decrypt the nonce value, generate a local report, generate a blind message for the local report and the nonce value, generate a signature for the blind message and the AK certificate, and send the signature and the blind message to the remote attestation agent module to request the remote attestation agent module to endorse the local report and give a remote attestation response message; verify the returned blind signature, confirm that the message value is consistent with what it has, and then forward the received blind signature, authentication result and local report to the TEE platform of the challenging party; The remote verification agent module is used to verify the received signature, confirm the legitimacy of the requesting node, and call the corresponding verification logic to verify the received local report according to the TEE type, generate the authentication result, blindly sign the blinded message with the private key, and return the blind signature and authentication result to the party to be authenticated.

[0038] The TEE platform of the challenging party and the TEE platform of the party to be authenticated are heterogeneous platforms.

[0039] It should be understood by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of an all-hardware embodiment, an all-software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of one or more computer-usable storage media (including but not limited to disk storage, CD - ROM , optical storage, etc.).

[0040] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0041] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0042] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0043] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made by those skilled in the art within the spirit and principle of the present invention without creative labor shall be included in the protection scope of the present invention.

Claims

1. An auxiliary heterogeneous remote authentication method with blind verification function, characterized in that: The following steps are involved: The heterogeneous TEE platform requests node registration from the remote attestation agent module, and obtains the AK certificate generated by the remote attestation agent module after successful registration; The challenger initiates a remote verification request to the party to be authenticated. The request contains an encrypted random string nonce value. The authenticator first decrypts the nonce value, generates a local report, generates a blind message for the local report and the nonce value, generates a signature for the blind message and the AK certificate, and sends the signature and the blind message to the remote attestation agent module to request the remote attestation agent module to endorse the local report and issue a remote attestation response message; The remote verification agent module verifies the received signature, confirms the legitimacy of the requesting node, and calls the corresponding verification logic according to the TEE type to verify the received local report, generates the authentication result, blindly signs the blinded message with the private key, and returns the blind signature and authentication result to the party to be authenticated; After the authenticator verifies the returned blind signature and confirms that the message value is consistent with what it has, it forwards the received blind signature, authentication result and local report to the challenging party; The challenger checks the received blind signature, authentication result, and local report, and confirms that the nonce value has not been tampered with, completing the authentication.

2. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 1, characterized in that: Each TEE platform uses the remote attestation agent module to complete remote attestation with the other end, and each TEE platform does not need to be compatible with the authentication logic of other heterogeneous TEE platforms.

3. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 1, characterized in that: The process of the heterogeneous TEE platform requesting node registration from the remote attestation agent module includes: the heterogeneous TEE node generates a pair of AK public and private keys for authenticating the identity to the remote attestation agent module and a shared key to be exchanged; The heterogeneous TEE node provides its own identity information, shared key and AK public key to the remote authentication agent module; The heterogeneous TEE node obtains the root certificate of the remote authentication agent module, the shared key of other nodes, and the AK certificate used for remote authentication.

4. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 3, characterized in that: The process of generating a pair of AK public-private keys and a key to be exchanged by a heterogeneous TEE node for authenticating the identity to a remote authentication agent module includes: a first heterogeneous TEE node generates a pair of public-private keys for authenticating the identity to a remote authentication agent module; and a shared secret key for Diffie-Hellman (DH) key exchange , the second heterogeneous TEE node generates a public-private key pair and a shared key , the remote authentication agent module generates a public-private key pair , the public key of the blind signature , private key d and root certificate ,in , p and q are large prime numbers, g is a generator, is the number of positive integers less than N and coprime with N, are large integers respectively, n is the product of p and q, e is the encrypted prime number, e and n are mutually prime, and d is the decrypted prime number; The two heterogeneous TEE nodes send their ID information, AK public key and shared key to the remote verification agent module respectively, requesting node registration.

5. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 3, characterized in that: During the node registration process, after receiving the request, the remote authentication agent module generates an AK certificate based on the AK public key. and , corresponding to the first heterogeneous TEE node and the second heterogeneous TEE node respectively; The remote authentication agent module will issue the AK certificate for the first heterogeneous TEE node , the shared key of other nodes , RSA blind signature public key (n, e) and your local root certificate Sent to the first heterogeneous TEE node together, and the AK certificate issued for the second heterogeneous TEE node , the shared key of other nodes , RSA blind signature public key (n, e) and your local root certificate Sent together to the second heterogeneous TEE node.

6. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 1, characterized in that: The challenger initiates a remote verification request to the party to be authenticated. The process of including the encrypted random string nonce value in the request includes: the challenger generates a random string nonce, and uses the DH shared key to Encrypt and get Sent to the party to be authenticated, where .

7. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 1 or 6, characterized in that: The party to be authenticated uses its own shared key Decrypt c to get the random string nonce, generate a local report report that matches your TEE node type, and use the RSA blind signature scheme to blind the random string nonce to get a blinded message ,in, is a hash function, means randomly selecting an element R from the multiplication group modulo N, yes The set of all elements in that are coprime to N, and Then it represents the integer ring modulo N, that is, the set of integers, using its own Generate signature ,sign Contents include: ,TEE type, And node ID information , construct a remote attestation request ,Include ,TEE type, , , report and signature , the request Sent to the remote verification agent module to request the remote verification agent module to endorse the local report and give a remote proof response message.

8. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 1 or 6, characterized in that the remote The verification agent module calls the corresponding verification logic according to the TEE type to verify the received local report, generate the authentication result, and use the private key to blindly sign the blinded message. The process includes: the remote verification agent module receives the request Then, use the public key of the party to be authenticated Verify the signature , confirm the legitimacy of the TEE node to be authenticated, and then call the corresponding verification interface according to the TEE type to obtain the authentication result of the report, using the private key PrivRK of the remote authentication agent module, the authentication result result, and the blinded message And report generates an authentication certificate attest, and then uses the RSA blind signature private key d stored locally in the remote verification agent module to blind the message Sign and get the blind signature message , construct the remote proof response message , including: attest and , the Validator will Sent to the TEE node of the party to be authenticated.

9. The auxiliary heterogeneous remote authentication method with blind verification function as claimed in claim 8, characterized in that: The authenticator receives the remote attestation response message , use the public key PubRK of the remote verification proxy module to verify the authentication certificate attest, then call the deblinding algorithm and verify it with the blind signature public key (n,e) Is it true? After confirming that the message has not been tampered with, and report forwarded to the challenging party; Challenge Extract the blind signature message , use the public key PubRK of the remote authentication proxy module to verify the authentication proof attest, confirm that the signature has not been tampered with, and verify and deblind the algorithm based on the received report and the locally stored nonce value Whether they are consistent, the verification is passed, and the remote proof to the authenticator is completed.

10. An auxiliary heterogeneous remote authentication system with blind verification function, characterized in that: include: The TEE platform of the challenging party is used to initiate a remote verification request to the TEE platform of the party to be authenticated. The request contains an encrypted random string nonce value, and checks the received blind signature, authentication result and local report, and confirms that the nonce value has not been tampered with to complete the authentication; The TEE platform of the party to be authenticated is used to decrypt the nonce value, generate a local report, generate a blind message for the local report and the nonce value, generate a signature for the blind message and the AK certificate, and send the signature and the blind message to the remote attestation agent module to request the remote attestation agent module to endorse the local report and give a remote attestation response message; verify the returned blind signature, confirm that the message value is consistent with what it has, and then forward the received blind signature, authentication result and local report to the TEE platform of the challenging party; The remote verification agent module is used to verify the received signature, confirm the legitimacy of the requesting node, and call the corresponding verification logic to verify the received local report according to the TEE type, generate the authentication result, blindly sign the blinded message with the private key, and return the blind signature and authentication result to the party to be authenticated.

Images