Application server security protection method and device based on trusted computing

Abstract

The invention relates to the technical field of application security, and provides an application server security protection method and device based on trusted computing. According to the method, an active security defense technology is adopted, from the perspective of an information system operation environment, a trusted computing technology and an application server are fused, protection is started from bottom-layer hardware, then, an application server middleware layer is started, and finally, an operable range is prefabricated in each link through a complete trust chain relation; and each link in the whole application system can be effectively ensured to be executed according to an expected effect. Even if the external attack enters the application system, any attack destruction operation cannot be carried out, such as RCE, XSS and other attack means cannot take effect, and the problems of penetration attack, 0Day vulnerability and the like are solved from the source.

Description

Technical Field

[0001] The present invention relates to the field of application security, and in particular to a method and device for application server security protection based on trusted computing. Background Art

[0002] At present, the application services of the existing technology consist of Figure 3 As shown, the existing technologies are basically based on analyzing data traffic and comparing library data to determine whether it is a normal or abnormal business request. The disadvantages of this defense method are that the fingerprint library may not be updated in time, there are 0day vulnerabilities in the system, and the request data is encrypted, which will cause the attack to bypass the protection layer and create the risk of defense failure. In addition, if the border protection device itself has defects, it is very likely to become a springboard for attackers to attack the target. By attacking the border device, they can successfully enter the target system and damage the system or "horizontally" cross the intranet. In addition, the border protection device will also increase the project construction cost, operation and maintenance overhead cost, and system performance impact.

[0003] The existing mainstream border security defense technology adopts passive defense, which can only make effective judgments when it is attacked. This method often has certain misjudgments and missed judgments. Misjudgments may cause the failure of normal business requests and information system failures, and missed judgments may cause the risk of information systems being attacked. Therefore, passive protection measures can only be regarded as pre-protection measures, which only treat the symptoms and not the root cause. It is difficult to ensure the security of information systems from the source. Summary of the invention

[0004] The present invention relates to a method and device for application server security protection based on trusted computing. The present invention adopts active security defense technology, starting from the perspective of information system operation environment, integrates trusted computing technology and application server, starts protection from the bottom hardware, then to the application server middleware layer, and finally to the top application information system. Through a complete trust chain relationship, an operable range is prefabricated in each link, effectively ensuring that each link in the entire application system can be executed according to the expected effect. Even if an external attack has entered the application system, no attack and destruction operations can be performed, such as RCE, XSS and other attack methods, which cannot take effect, and solves the problems of penetration attacks and 0Day vulnerabilities from the root.

[0005] In a first aspect, the present invention proposes an application server security protection method based on trusted computing, comprising:

[0006] Pre-build a trusted chain, which includes hardware platform, operating system, secure and trusted application server and target application.

[0007] The interface operation directory and application files of the target application are configured with permissions through the trusted middleware, and the application access permissions are bound; wherein the trusted middleware is set through the trusted application server;

[0008] Obtain access information based on application access rights; wherein the access information includes encryption access and storage access;

[0009] When the access information is encrypted access, the data transmission interface between the target application and the trusted middleware is determined, and the target application is encrypted through a preset trusted cryptographic service to determine the ciphertext data;

[0010] When the access information is storage access, the login user of the target application is authenticated through the trusted application server, and when the authentication is successful, the storage operation of the login user is executed.

[0011] In combination with the first aspect, the pre-building of a trusted chain further includes:

[0012] Establish a static root of trust based on the hardware platform;

[0013] The operating system is used to guide the trust root to perform trust extension and determine the target application that can be loaded and executed; wherein, during the trust extension, the execution code of the target application meets the preset trustworthiness, the corresponding target application meets the trust extension, and the trusted chain is connected;

[0014] The number of target applications is greater than or equal to 1;

[0015] The target application's executable code is tested by the operating system to determine its trustworthiness.

[0016] In combination with the first aspect, the management end of the trusted middleware is provided with a three-member management mechanism for ensuring the security of the network; wherein the three-member management mechanism for ensuring the security of the network is configured by presetting an administrator and binding the trusted operation authority;

[0017] When performing permission configuration, if the administrator of the permission configuration has trusted operation permissions, the permission configuration function is triggered.

[0018] In combination with the first aspect, the trusted cryptographic services include: national secret SM2 encryption, national secret SM3 encryption, and national secret SM4 encryption.

[0019] In combination with the first aspect, configuring the permissions of the interface operation directory and application files of the target application through the trusted middleware further includes:

[0020] Determine the interface operation directory and application file of the target application according to the trusted chain, wherein the interface operation directory and the application file correspond to each other;

[0021] According to the trusted middleware, the trustworthiness of each interface operation directory is determined, and the trustworthiness and application configurable permissions are mapped and associated to generate a permission configuration association sequence; wherein the application configurable permissions are used to characterize the scope of permissions that can be configured at different trustworthiness levels;

[0022] Generate the permission causal chain of the target application based on the permission configuration association sequence;

[0023] Automatically update permissions for target applications based on the permission causal chain.

[0024] In combination with the first aspect, obtaining access information includes:

[0025] Based on the application access rights, determine whether the application associated with the real-time access request has access rights, where:

[0026] When access rights exist, determining the interface operation directory and access information of the associated application; wherein the access information is obtained based on the access interface of the interface operation directory;

[0027] The trusted middleware identifies the access information of the access interface one by one, matches the access information with each operation interface in the interface operation directory, and determines the matching result;

[0028] When the access interface and access information in the matching result match, the corresponding access operation is performed.

[0029] In combination with the first aspect, the trusted cryptographic service is also used to

[0030] Obtaining the called trusted cryptographic service, determining the first encryption interface, the first encryption function and the first encryption space configured by the trusted cryptographic service; wherein the first encryption interface, the first encryption function and the first encryption space are called by the trusted middleware within the scope of authority according to the authority configuration of the target application;

[0031] The data to be encrypted in the target application is transmitted to the first encryption space through the first encryption interface and encrypted by the first encryption function, and after the ciphertext data is generated, it is transmitted to the target application; wherein, when the data to be encrypted is not unique, the second encryption interface, the second encryption function and the second encryption space are configured through the trusted cryptographic service, and the second data with the encrypted data is transmitted to the second encryption space through the second encryption interface and encrypted by the second encryption function.

[0032] In combination with the first aspect, the authentication further includes:

[0033] The trusted application server receives an authentication request initiated by the logged-in user, wherein the authentication request carries a trust value of any target application on the trusted chain;

[0034] The trusted application server sends an authentication message to the trusted chain, wherein the authentication message includes a trusted value, and the permission configuration range and storage permission space carried in the trusted value are determined;

[0035] The trusted server performs a storage operation according to the authentication response message of the authentication message.

[0036] In combination with the first aspect, the storage operation further includes:

[0037] Read the stored data of the logged-in user and determine the storage permissions of the logged-in user;

[0038] Determine the data storage location and data storage space of the logged-in user according to the storage permission; the storage space is not unique;

[0039] According to the storage location and storage space, the storage data is divided into capacity and allocated in position, and after the capacity division and position allocation, an independent data channel is re-established to store the storage data through the independent data channel.

[0040] In a second aspect, an application server security protection device based on trusted computing includes:

[0041] Protection layer: used to pre-build a trusted chain, which includes hardware platform, operating system, secure and trusted application server and target application.

[0042] Permission configuration layer: used to configure the interface operation directory and application files of the target application through the trusted middleware, and bind the application access rights; the trusted middleware is set through the trusted application server;

[0043] Application access layer: used to obtain access information based on application access rights; the access information includes encryption access and storage access;

[0044] Trusted encryption layer: used to determine the data transmission interface between the target application and the trusted middleware when the access information is encrypted, and to encrypt the target application through the preset trusted cryptographic service to determine the ciphertext data;

[0045] Trusted storage layer: used to authenticate the login user of the target application through the trusted application server when the access information is storage access, and execute the storage operation of the login user when the authentication is successful.

[0046] The beneficial effects of the present invention are:

[0047] The present invention aims at the problems of malicious network attacks and sensitive data leakage caused by weak system protection capabilities and backward protection devices in the financial industry. It integrates trusted computing technology with application server middleware. Starting from the source of the application system being attacked, the trusted application server middleware security administrator binds the application access rights and the files and directories that the application is allowed to touch, so that even if external malicious attacks break into the system through application layer vulnerabilities, they cannot unauthorizedly read system files or illegally execute system commands, thus making the penetration test attack method invalid from the root and solving the system 0Day vulnerability problem.

[0048] In order to solve the problems of sensitive information leakage of application system and destruction of application layer files, the present invention exposes the trusted data encryption and trusted data storage functions to the application layer through the application server middleware, so that the application layer data is encrypted and stored through the trusted service. Even if an external attack breaks through the outer layer defense of the system and enters the interior of the system, it cannot obtain sensitive information of the application system or access and tamper with the core files and data of the application.

[0049] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0050] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0052] Figure 1 A method flow chart of a method for protecting application server security based on trusted computing in an embodiment of the present invention;

[0053] Figure 2 This is a device composition diagram of an application server security protection device based on trusted computing in an embodiment of the present invention;

[0054] Figure 3 This is a composition diagram of an application server in the prior art;

[0055] Figure 4 This is a derivation model diagram of a trusted application server for a trusted chain in an embodiment of the present invention;

[0056] Figure 5 This is an architecture diagram of a trusted application server middleware security protection system in an embodiment of the present invention. DETAILED DESCRIPTION

[0057] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0058] like Figure 1 and Figure 5 As shown, this embodiment provides an application server security protection method based on trusted computing, including:

[0059] Pre-build a trusted chain, which includes hardware platform, operating system, secure and trusted application server and target application.

[0060] The interface operation directory and application files of the target application are configured with permissions through the trusted middleware, and the application access permissions are bound; wherein the trusted middleware is set through the trusted application server;

[0061] Obtain access information based on application access rights; wherein the access information includes encryption access and storage access;

[0062] When the access information is encrypted access, the data transmission interface between the target application and the trusted middleware is determined, and the target application is encrypted through a preset trusted cryptographic service to determine the ciphertext data;

[0063] When the access information is storage access, the login user of the target application is authenticated through the trusted application server, and when the authentication is successful, the storage operation of the login user is executed.

[0064] The principle of the above technical solution is:

[0065] The present invention first connects the hardware platform (hardware server, financial server), operating system (the operating system of the present invention is similar to OpenHarmony. OpenHarmony is the base of a pan-terminal operating system and has been widely used in the financial field. The operating system developed based on OpenHarmony has the advantages of modularization and customization, and can reduce the operation and maintenance and upgrade costs of financial equipment. At present, there are a variety of financial service terminals and financial Internet of Things terminals based on OpenHarmony in use on the market), secure and trusted application servers and target applications for trusted chaining to build a trusted chain. In the specific implementation process, before the application is deployed, the directories and files of all interface operations of the application need to be configured with permissions through the trusted middleware security administrator, and the application access permissions must be bound. Normal operations are performed according to the directories and files touched by the bound application to prevent malicious penetration attacks or unauthorized reading of system files or illegal execution of system commands through upper-level applications.

[0066] The present invention is directed to the trusted cryptographic service in the existing trusted computing, because the trusted cryptographic service of the prior art relies on the trusted module to provide cryptographic services to the system and users. By calling the cryptographic function in the trusted cryptographic module, functions such as trusted storage, trusted measurement, and trusted reporting are realized. In the traditional solution, this capability is not open to the upper-level applications, resulting in the need to add additional encryption devices (encryption machines, password cards, etc.) if the application interaction data needs to be encrypted and decrypted. In response to this problem, the secure and trusted application server middleware improves the trusted cryptographic service and opens this function to the upper-level applications, so that the upper-level business applications can directly use the trusted cryptographic module for encryption and decryption operations, reducing the need to install additional equipment to meet the encryption and decryption work.

[0067] In the prior art, trusted computing measures and protects system-level files to prevent attackers from entering from the system level and maliciously modifying the verification work of system files. For upper-level applications, if attackers break in from the web side and modify files in the application permission directory, it is impossible to protect them. To address this problem, the present invention strengthens the trusted computing function, adds encryption protection for important files in the application, permission protection, and storage protection of the management-side information trusted module, etc.

[0068] The beneficial effects of the above technical solution are:

[0069] The present invention aims at the problems of malicious network attacks and sensitive data leakage caused by weak system protection capabilities and backward protection devices in the financial industry. It integrates trusted computing technology with application server middleware. Starting from the source of the application system being attacked, the trusted application server middleware security administrator binds the application access rights and the files and directories that the application is allowed to touch, so that even if external malicious attacks break into the system through application layer vulnerabilities, they cannot unauthorizedly read system files or illegally execute system commands, thus making the penetration test attack method invalid from the root and solving the system 0Day vulnerability problem.

[0070] In order to solve the problems of sensitive information leakage of application system and destruction of application layer files, the present invention exposes the trusted data encryption and trusted data storage functions to the application layer through the application server middleware, so that the application layer data is encrypted and stored through the trusted service. Even if an external attack breaks through the outer layer defense of the system and enters the interior of the system, it cannot obtain sensitive information of the application system or access and tamper with the core files and data of the application.

[0071] As an embodiment of the present invention: the pre-building of a trusted chain further includes:

[0072] Establish a static root of trust based on the hardware platform;

[0073] The operating system is used to guide the trust root to perform trust extension and determine the target application that can be loaded and executed; wherein, during the trust extension, the execution code of the target application meets the preset trustworthiness, the corresponding target application meets the trust extension, and the trusted chain is connected;

[0074] The number of target applications is greater than or equal to 1;

[0075] The target application's executable code is tested by the operating system to determine its trustworthiness.

[0076] The principle of the above technical solution is:

[0077] like Figure 4 As shown in the figure, for the trusted chain, trust transfer needs to be started from the hardware platform to build a trusted chain; trust transfer is used to boot the system from a static trust root, and trust is extended to include those codes that are not in the trust root. In this trusted extension instance, the target code will first be trusted before executing the control transfer. Only when its trustworthiness is acceptable will the trust be extended.

[0078] As a link in the trusted chain, the trusted middleware's code will be loaded and executed, and it will be subject to the trustworthiness measurement of the trusted operating system. Only when it meets the trustworthiness requirements can it be trusted by the entire system.

[0079] The beneficial effects of the above technical solution are:

[0080] The present invention ensures the credibility of the trusted application server middleware during the entire operation period

[0081] As an embodiment of the present invention: the management end of the trusted middleware is provided with a three-member management mechanism for equal protection; wherein the three-member management mechanism for equal protection uses a preset administrator and is bound to a trusted operation authority;

[0082] When performing permission configuration, if the administrator of the permission configuration has trusted operation permissions, the permission configuration function is triggered.

[0083] The principle of the above technical solution is:

[0084] The present invention adopts a three-member management mechanism of equal protection in the middleware management end of the secure and trusted application server. The administrator's operating authority is based on the trusted operating system and is bound to the trusted operating system administrator's authority. When the trusted operating system is the administrator, the middleware management end of the secure and trusted application server is limited to the logged-in system administrator for operation and configuration, and operations by other users are invalid.

[0085] The beneficial effects of the above technical solution are:

[0086] The present invention can ensure that only administrators can perform trusted operations and set trusted operation permissions for different applications.

[0087] As an embodiment of the present invention: the trusted cryptographic service includes: national encryption SM2 encryption, national encryption SM3 encryption, and national encryption SM4 encryption.

[0088] The principle of the above technical solution is:

[0089] The trusted cryptographic service in existing trusted computing relies on the trusted module to provide cryptographic services to the system and users. The system implements trusted storage, trusted measurement, trusted reporting and other functions by calling the cryptographic functions in the trusted cryptographic module. However, in traditional solutions, this capability is not open to upper-layer applications, resulting in the need to add additional encryption devices (encryption machines, password cards, etc.) if application interaction data needs to be encrypted or decrypted.

[0090] The present invention provides a trusted cryptographic service for the application layer, and provides national secret SM2, SM3, and SM4 encryption to meet the national secret transformation requirements. The application transmits data to the application server by configuring the data transmission interface opened by the secure and trusted application server middleware. After the application server completes the encryption work, the ciphertext data is returned to the upper layer application, and the decryption and encryption methods are kept consistent.

[0091] The beneficial effects of the above technical solution are:

[0092] The secure and trusted application server middleware of the present invention improves the trusted cryptographic service and opens the function to upper-layer applications, so that upper-layer business applications can directly use the trusted cryptographic module for encryption and decryption operations, thereby reducing the need to install additional equipment to meet encryption and decryption work.

[0093] As an embodiment of the present invention, the step of configuring the permissions of the interface operation directory and application files of the target application through the trusted middleware further includes:

[0094] Determine the interface operation directory and application file of the target application according to the trusted chain, wherein the interface operation directory and the application file correspond to each other;

[0095] According to the trusted middleware, the trustworthiness of each interface operation directory is determined, and the trustworthiness and application configurable permissions are mapped and associated to generate a permission configuration association sequence; wherein the application configurable permissions are used to characterize the scope of permissions that can be configured at different trustworthiness levels;

[0096] Generate the permission causal chain of the target application based on the permission configuration association sequence;

[0097] Automatically update permissions for target applications based on the permission causal chain.

[0098] The principle of the above technical solution is:

[0099] First, the operating system determines the interface operation directory and application files of the target application. In actual implementation, the interface operation directory and application files correspond to each other, that is, the relationship between them is determined. For example, suppose we are developing a social media application that has many user interface elements (such as buttons, menus, etc.) and code files associated with them. These elements and files are the interface operation directory and application files of the target application.

[0100] Secondly, the operating system uses the trusted middleware to determine the trustworthiness of each interface operation directory. The trusted middleware checks the access history, frequency of use, and other relevant information of each interface operation directory and classifies it into different trustworthiness levels. For example, a frequently accessed interface operation directory may be considered highly trusted, while an infrequently used interface operation directory may be considered less trusted.

[0101] Then, the operating system maps and associates the trustworthiness and the configurable permissions of the application to generate a permission configuration association sequence. The trustworthiness of each interface operation directory is matched with the permissions that can be configured, and a permission configuration association sequence is generated based on the matching results. For example, for a high-trustworthiness interface operation directory, the operating system may assign it a wider range of permissions, while for a low-trustworthiness interface operation directory, the operating system may assign it a narrower permission.

[0102] Finally, the system automatically updates the permissions of the target application based on the generated permission configuration association sequence. The operating system's security mechanism can automatically update the permission settings of the target application based on the current permission configuration association sequence. In this way, even if new or suspicious activities occur, the permission settings of the target application can be adjusted in a timely manner, thereby ensuring the security of the entire operating system and user operation data.

[0103] The beneficial effects of the above technical solution are:

[0104] When the target application's files are updated according to the permission causal chain, the corresponding permissions are automatically updated without the need to re-set the application's permissions.

[0105] As an embodiment of the present invention: the obtaining of access information includes:

[0106] Based on the application access rights, determine whether the application associated with the real-time access request has access rights, where:

[0107] When access rights exist, determining the interface operation directory and access information of the associated application; wherein the access information is obtained based on the access interface of the interface operation directory;

[0108] The trusted middleware identifies the access information of the access interface one by one, matches the access information with each operation interface in the interface operation directory, and determines the matching result;

[0109] When the access interface and access information in the matching result match, the corresponding access operation is performed.

[0110] The principle of the above technical solution is:

[0111] First, based on the application access rights, determine whether the associated application of the real-time access request has access rights. If the associated application does not have the corresponding access rights, the real-time access request is sent to the trusted middleware, which performs access control verification. If the real-time access request is an unauthorized request, the trusted middleware returns the request. On the contrary, if the associated application has the corresponding access rights, it is necessary to further obtain the interface operation directory and access information of the associated application.

[0112] Next, the access information of the access interface is identified one by one through the trusted middleware, and matched with each operation interface in the interface operation directory. The matching result is used to decide whether to execute the corresponding access operation. If the matching result is correct, the corresponding access operation will be executed. However, if the matching result is incorrect, the connection with the corresponding access interface will be cut off.

[0113] The beneficial effects of the above technical solution are:

[0114] The present invention can effectively prevent associated applications from accidentally touching or abusing interfaces of other applications without corresponding permissions, thereby protecting the security of the entire operating system and data.

[0115] As an embodiment of the present invention: the trusted cryptographic service is also used for

[0116] Obtaining the called trusted cryptographic service, determining the first encryption interface, the first encryption function and the first encryption space configured by the trusted cryptographic service; wherein the first encryption interface, the first encryption function and the first encryption space are called by the trusted middleware within the scope of authority according to the authority configuration of the target application;

[0117] The data to be encrypted in the target application is transmitted to the first encryption space through the first encryption interface and encrypted by the first encryption function, and after the ciphertext data is generated, it is transmitted to the target application; wherein, when the data to be encrypted is not unique, the second encryption interface, the second encryption function and the second encryption space are configured through the trusted cryptographic service, and the second data with the encrypted data is transmitted to the second encryption space through the second encryption interface and encrypted by the second encryption function.

[0118] The principle of the above technical solution is:

[0119] In addition to the aforementioned interface operation directory and application file permission configuration, access information matching check and other functions, the present invention also uses a trusted cryptographic service to obtain and process cryptographic service calls. Specifically, the trusted cryptographic service is also used to determine the encryption interface, encryption function and encryption space configured by the trusted cryptographic service.

[0120] Then, the data to be encrypted in the target application is processed, encrypted through the first encryption interface and the first encryption function, and ciphertext data is generated. If the data to be encrypted is not unique, it needs to be encrypted again through the second encryption interface, the second encryption function, and the second encryption space configured by the trusted cryptographic service. After the encryption is completed, the ciphertext data is transmitted back to the target application.

[0121] Throughout the entire process, the values ​​of encryption interfaces, encryption functions, and encryption spaces are called by the trusted middleware within the scope of permissions according to the permission configuration of the target application. This ensures that only legitimate and authorized applications can access the corresponding encryption interfaces, encryption functions, and encryption spaces, thereby enhancing the security of the operating system.

[0122] As an embodiment of the present invention, the authentication further includes:

[0123] The trusted application server receives an authentication request initiated by the logged-in user, wherein the authentication request carries a trust value of any target application on the trusted chain;

[0124] The trusted application server sends an authentication message to the trusted chain, wherein the authentication message includes a trusted value, and the permission configuration range and storage permission space carried in the trusted value are determined;

[0125] The trusted server performs a storage operation according to the authentication response message of the authentication message.

[0126] The principle of the above technical solution is:

[0127] The application server security protection method based on trusted computing of the present invention not only realizes the permission control, but also adds the authentication link. When receiving the authentication request of the logged-in user, an authentication message will be sent to the trusted chain according to the trusted value of any target application on the trusted chain in the request. In addition to the trusted value, the permission configuration range and storage permission space corresponding to the trusted value will also be determined in the message.

[0128] Subsequently, the server performs the corresponding storage operation according to the received authentication response message. This ensures that only authorized users or applications can successfully complete the authentication, thereby improving the security of the operating system. At the same time, since this process is based on a trusted chain, it also has the characteristics of trusted computing and can effectively prevent various forms of attacks.

[0129] As an embodiment of the present invention: the storage operation further includes:

[0130] Read the stored data of the logged-in user and determine the storage permissions of the logged-in user;

[0131] Determine the data storage location and data storage space of the logged-in user according to the storage permission; the storage space is not unique;

[0132] According to the storage location and storage space, the storage data is divided into capacity and allocated in position, and after the capacity division and position allocation, an independent data channel is re-established to store the storage data through the independent data channel.

[0133] The principle of the above technical solution is:

[0134] The present invention logs in the user's stored data and determines the logged-in user's storage authority, identifies the user's identity and verifies that the user has the corresponding authority to access the stored data.

[0135] Based on storage permissions, the data storage location and data storage space of the logged-in user are determined. This is achieved by dividing the storage space into multiple independent areas or folders, each of which corresponds to a specific user or user group, thereby limiting their ownership and access to data.

[0136] According to the storage location and storage space, the storage data is divided into capacity and location allocation. This is done based on factors such as the importance, sensitivity and frequency of use of the data to ensure the reliability and security of the data.

[0137] The storage data is stored through independent data channels. The independent data channels are used to ensure that even if a problem occurs in a data channel, it will not affect the normal operation of other data channels, thereby improving the stability and reliability of the operating system.

[0138] As another embodiment of the present invention, the present invention proposes an application server security protection device based on trusted computing, comprising:

[0139] Protection layer: used to pre-build a trusted chain, which includes hardware platform, operating system, secure and trusted application server and target application.

[0140] Permission configuration layer: used to configure the interface operation directory and application files of the target application through the trusted middleware, and bind the application access rights; the trusted middleware is set through the trusted application server;

[0141] Application access layer: used to obtain access information based on application access rights; the access information includes encryption access and storage access;

[0142] Trusted encryption layer: used to determine the data transmission interface between the target application and the trusted middleware when the access information is encrypted, and to encrypt the target application through the preset trusted cryptographic service to determine the ciphertext data;

[0143] Trusted storage layer: used to authenticate the login user of the target application through the trusted application server when the access information is storage access, and execute the storage operation of the login user when the authentication is successful.

[0144] The principle of the above technical solution is:

[0145] like Figure 2 As shown, the protection layer of the present invention first links the hardware platform, operating system, secure and trusted application server and target application to a trusted chain to build a trusted chain. In the specific implementation process, before the application is deployed, the directories and files operated by all application interfaces need to be configured with permissions by the trusted middleware security administrator, and the application access permissions are bound. Normal operations are performed according to the directories and files touched by the bound application to prevent malicious penetration attacks or unauthorized reading of system files or illegal execution of system commands through upper-level applications. The application access layer of the present invention allows applications at the application layer to directly access upper-level hardware and systems through trusted middleware.

[0146] The present invention also proposes a solution for the trusted cryptographic service in the existing trusted computing, because the trusted cryptographic service of the prior art relies on the trusted module to provide cryptographic services to the system and users. The system implements functions such as trusted storage, trusted measurement, and trusted reporting by calling the cryptographic functions in the trusted cryptographic module. In the traditional solution, this capability is not open to the upper-level applications, resulting in the need to add additional encryption devices (encryption machines, password cards, etc.) if the application interaction data needs to be encrypted and decrypted. In response to this problem, the trusted encryption layer of the present invention improves the trusted cryptographic service through the secure and trusted application server middleware, opens this capability to the upper-level applications, and enables the upper-level business applications to directly use the trusted cryptographic module for encryption and decryption operations, reducing the need to install additional equipment to meet the encryption and decryption work.

[0147] In the prior art, trusted computing measures and protects system-layer files to prevent attackers from entering from the system layer and maliciously modifying the verification work of system files. For upper-layer applications, if attackers break in from the web end and modify files in the application permission directory, it is impossible to protect them. To address this problem, the trusted storage layer of the present invention strengthens the trusted computing function, adds encryption protection for important files in the application, permission protection, and storage protection of the management-end information trusted module, etc.

[0148] The beneficial effects of the above technical solution are:

[0149] The present invention aims at the problems of malicious network attacks and sensitive data leakage caused by weak system protection capabilities and backward protection devices in the financial industry. It integrates trusted computing technology with application server middleware. Starting from the source of the application system being attacked, the trusted application server middleware security administrator binds the application access rights and the files and directories that the application is allowed to touch, so that even if external malicious attacks break into the system through application layer vulnerabilities, they cannot unauthorizedly read system files or illegally execute system commands, thus making the penetration test attack method invalid from the root and solving the system 0Day vulnerability problem.

[0150] In order to solve the problems of sensitive information leakage of application system and destruction of application layer files, the present invention exposes the trusted data encryption and trusted data storage functions to the application layer through the application server middleware, so that the application layer data is encrypted and stored through the trusted service. Even if an external attack breaks through the outer layer defense of the system and enters the interior of the system, it cannot obtain sensitive information of the application system or access and tamper with the core files and data of the application.

[0151] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A method for protecting application server security based on trusted computing, characterized in that: include: Pre-build a trusted chain, which includes hardware platform, operating system, secure and trusted application server and target application. The interface operation directory and application files of the target application are configured with permissions through the trusted middleware, and the application access permissions are bound; wherein the trusted middleware is set through the trusted application server; Obtain access information based on application access rights; wherein the access information includes encryption access and storage access; When the access information is encrypted access, the data transmission interface between the target application and the trusted middleware is determined, and the target application is encrypted through a preset trusted cryptographic service to determine the ciphertext data; When the access information is storage access, the login user of the target application is authenticated through the trusted application server, and when the authentication is successful, the storage operation of the login user is executed.

2. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The pre-built trusted chain also includes: Establish a static root of trust based on the hardware platform; The operating system is used to guide the trust root to perform trust extension and determine the target application that can be loaded and executed; wherein, during the trust extension, the execution code of the target application meets the preset trustworthiness, the corresponding target application meets the trust extension, and the trusted chain is connected; The number of target applications is greater than or equal to 1; The target application's executable code is tested by the operating system to determine its trustworthiness.

3. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The management end of the trusted middleware is provided with a three-member management mechanism for the security protection; wherein the three-member management mechanism for the security protection is through a preset administrator and is bound to the trusted operation authority; When performing permission configuration, if the administrator of the permission configuration has trusted operation permissions, the permission configuration function is triggered.

4. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The trusted cryptographic services include: national secret SM2 encryption, national secret SM3 encryption, and national secret SM4 encryption.

5. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The step of configuring the permissions of the interface operation directory and application files of the target application through the trusted middleware also includes: Determine the interface operation directory and application file of the target application according to the trusted chain, wherein the interface operation directory and the application file correspond to each other; According to the trusted middleware, the trustworthiness of each interface operation directory is determined, and the trustworthiness and application configurable permissions are mapped and associated to generate a permission configuration association sequence; wherein the application configurable permissions are used to characterize the scope of permissions that can be configured at different trustworthiness levels; Generate the permission causal chain of the target application based on the permission configuration association sequence; Automatically update permissions for target applications based on the permission causal chain.

6. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The obtaining of access information includes: Based on the application access rights, determine whether the application associated with the real-time access request has access rights, where: When there is no access right, the real-time access request is sent to the trusted middleware for access control verification, and when the real-time access request is an unauthorized request, the real-time access request is returned; When access rights exist, determining the interface operation directory and access information of the associated application; wherein the access information is obtained based on the access interface of the interface operation directory; The trusted middleware identifies the access information of the access interface one by one, matches the access information with each operation interface in the interface operation directory, and determines the matching result; When the access interface and access information in the matching result match, the corresponding access operation is performed; When the access interface and the access information in the matching result do not match, the connection with the corresponding access interface is cut off.

7. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The trusted cryptographic service is also used to: Obtaining the called trusted cryptographic service, determining the first encryption interface, the first encryption function and the first encryption space configured by the trusted cryptographic service; wherein the first encryption interface, the first encryption function and the first encryption space are called by the trusted middleware within the scope of authority according to the authority configuration of the target application; The data to be encrypted in the target application is transmitted to the first encryption space through the first encryption interface and encrypted by the first encryption function, and after the ciphertext data is generated, it is transmitted to the target application; wherein, when the data to be encrypted is not unique, the second encryption interface, the second encryption function and the second encryption space are configured through the trusted cryptographic service, and the second data with the encrypted data is transmitted to the second encryption space through the second encryption interface and encrypted by the second encryption function.

8. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The authentication also includes: The trusted application server receives an authentication request initiated by the logged-in user, wherein the authentication request carries a trust value of any target application on the trusted chain; The trusted application server sends an authentication message to the trusted chain, wherein the authentication message includes a trusted value, and the permission configuration range and storage permission space carried in the trusted value are determined; The trusted server performs a storage operation according to the authentication response message of the authentication message.

9. The application server security protection method based on trusted computing as claimed in claim 1, characterized in that: The storage operation further includes: Read the stored data of the logged-in user and determine the storage permissions of the logged-in user; Determine the data storage location and data storage space of the logged-in user according to the storage permission; the storage space is not unique; According to the storage location and storage space, the storage data is divided into capacity and allocated in position, and after the capacity division and position allocation, an independent data channel is re-established to store the storage data through the independent data channel.

10. An application server security protection device based on trusted computing, characterized in that: include: Protection layer: used to pre-build a trusted chain, which includes hardware platform, operating system, secure and trusted application server and target application. Permission configuration layer: used to configure the interface operation directory and application files of the target application through the trusted middleware, and bind the application access rights; the trusted middleware is set through the trusted application server; Application access layer: used to obtain access information based on application access rights; the access information includes encryption access and storage access; Trusted encryption layer: used to determine the data transmission interface between the target application and the trusted middleware when the access information is encrypted, and to encrypt the target application through the preset trusted cryptographic service to determine the ciphertext data; Trusted storage layer: used to authenticate the login user of the target application through the trusted application server when the access information is storage access, and execute the storage operation of the login user when the authentication is successful.

Images