A method and device for protecting an application server based on trusted computing

Abstract

The application relates to the field of application security technology, and provides an application server security protection method and device based on trusted computing. The application adopts active security defense technology, and fuses trusted computing technology and the application server from the perspective of the information system operation environment, protects from the bottom hardware, then to the application server middleware layer, and finally to the uppermost application information system, and through a complete trust chain relationship, the operable range is pre-prepared at each link, so that the whole application system can be effectively ensured to be executed according to the expected effect. Even if external attacks have entered the application system, any attack and damage operation such as RCE, XSS and the like cannot take effect, so that the problems of penetration attacks and 0Day vulnerabilities and the like are solved from the root.

Description

TECHNICAL FIELD

[0001] The application relates to the field of application security, in particular to an application server security protection method and device based on trusted computing. BACKGROUND

[0002] At present, the application service composition of the prior art is as shown in the figure Figure 3 The prior art is basically based on data flow analysis and database data comparison to determine whether it is a normal or abnormal business request. The disadvantage of this defense method is that the fingerprint library may not be updated in time, there are 0day vulnerabilities in the system, request data encryption and other conditions, which will cause the attack to bypass the protection layer and cause the risk of defense failure. In addition, if the boundary protection device itself has defects, it is very likely to become a stepping stone for the attacker to attack the target, by attacking the boundary device, successfully entering the target system, and destroying the system or performing "horizontal" penetration of the internal network. In addition to this, the boundary protection device will also increase the project construction cost, operation and maintenance cost, system performance impact and other problems.

[0003] The existing mainstream boundary security defense technology adopts passive defense, which can only effectively determine when attacked. This method often has certain misjudgment and omission. Misjudgment may cause normal business request failure, information system failure, etc. Omission may cause the risk of information system being attacked. Therefore, passive protection measures can only belong to the pre-protection means, and it is difficult to guarantee the safety of the information system from the source. SUMMARY

[0004] The application relates to an application server security protection method and device based on trusted computing. The application adopts active security defense technology, starts from the information system running environment, integrates trusted computing technology and application server, protects from the bottom hardware, then to the application server middleware layer, and finally to the uppermost application information system. Through the complete trust chain relationship, the operable range is pre-prepared at each link, and the entire application system is effectively ensured to be executed according to the expected effect. Even if external attacks have entered the application system, any attack and damage operation such as RCE, XSS, etc. cannot take effect, and the problems of penetration attack and 0Day vulnerability are solved from the root.

[0005] In the first aspect, the application provides an application server security protection method based on trusted computing, which comprises:

[0006] A trusted chain is pre-built. The trusted chain comprises a hardware platform, an operating system, a secure trusted application server and a target application.

[0007] The interface operation directory and the application file of the target application are configured with permissions through the trusted middleware, and the application access permission is bound; wherein, the trusted middleware is set through a trusted application server;

[0008] According to the application access permission, access information is obtained; wherein, the access information includes encrypted access and storage access;

[0009] When the access information is encrypted access, the data transmission interface of the target application and the trusted middleware is determined, and the target application is encrypted through a preset trusted password service to determine the ciphertext data;

[0010] When the access information is storage access, the login user of the target application is authenticated through the trusted application server, and when the authentication is successful, the storage operation of the login user is executed.

[0011] In combination with the first aspect, the pre-built trusted chain further includes:

[0012] According to the hardware platform, a static root of trust is established;

[0013] The root of trust is booted by an operating system to expand trust, and the target application that can be loaded and executed is determined; wherein, when the trust is expanded, the execution code of the target application meets a preset trust degree, the corresponding target application meets the trust expansion, and the trusted chain is connected;

[0014] The number of target applications is greater than or equal to 1;

[0015] The execution code of the target application is measured for trustworthiness by the operating system to determine the trustworthiness.

[0016] In combination with the first aspect, the management end of the trusted middleware is provided with an equal protection three-member management mechanism; wherein, the equal protection three-member management mechanism binds the trusted operation permission through a preset administrator;

[0017] When the permission configuration is performed, if the administrator of the permission configuration has the trusted operation permission, the permission configuration function is triggered.

[0018] In combination with the first aspect, the trusted password service includes: national encryption SM2, national encryption SM3, and national encryption SM4.

[0019] In combination with the first aspect, the permission configuration of the interface operation directory and the application file of the target application through the trusted middleware further includes:

[0020] According to the trusted chain, the interface operation directory and the application file of the target application are determined, wherein, the interface operation directory and the application file correspond to each other;

[0021] According to the trusted middleware, the trustworthiness of each interface operation directory is determined, the trustworthiness is mapped and associated with the application configurable permission, and a permission configuration association sequence is generated; wherein, the application configurable permission is used to represent the permission range that can be configured for different trustworthiness;

[0022] According to the permission configuration association sequence, the permission causal chain of the target application is generated;

[0023] According to the permission causal chain, the target application is automatically updated.

[0024] In combination with the first aspect, the access information includes:

[0025] According to the application access permission, it is judged whether the associated application of the real-time access request has access permission, wherein:

[0026] When there is access permission, the interface operation directory and the access information of the associated application are determined; wherein, the access information is obtained based on the access interface of the interface operation directory;

[0027] The access information of the access interface is identified one by one by the trusted middleware, and the access information is matched with each operation interface in the interface operation directory, and the matching result is determined;

[0028] When the access interface and the access information in the matching result match, the corresponding access operation is performed.

[0029] In combination with the first aspect, the trusted password service is also used for

[0030] The called trusted password service is obtained, the first encryption interface, the first encryption function and the first encryption space configured by the trusted password service are determined; wherein, the first encryption interface, the first encryption function and the first encryption space are called by the trusted middleware within the permission range according to the permission configuration of the target application;

[0031] The data to be encrypted in the target application is transmitted to the first encryption space through the first encryption interface, and is encrypted by the first encryption function, and after the ciphertext data is generated, it is transmitted to the target application; wherein, when the data to be encrypted is not unique, the second encryption interface, the second encryption function and the second encryption space configured by the trusted password service are used, and the second data of the data to be encrypted is transmitted to the second encryption space through the second encryption interface and is encrypted by the second encryption function.

[0032] In combination with the first aspect, the authentication also includes:

[0033] The authentication request initiated by the login user is received through the trusted application server, wherein the authentication request carries the trustworthiness value of any target application on the trusted chain;

[0034] The trusted application server sends an authentication message to the trusted chain, wherein the authentication message includes a trusted value, and the permission configuration range and the storage permission space carried in the trusted value are determined;

[0035] The trusted server performs a storage operation according to an authentication response message of the authentication message.

[0036] In combination with the first aspect, the storage operation further includes:

[0037] The storage data of the login user is read, and the storage permission of the login user is determined;

[0038] According to the storage permission, the data storage location and the data storage space of the login user are determined; wherein the storage space is not unique.

[0039] According to the storage location and the storage space, the storage data is divided in capacity and allocated in position, and after the capacity division and the position allocation, an independent data channel is re-established, and the storage data is stored through the independent data channel.

[0040] The second aspect is a security protection device of an application server based on trusted computing, comprising:

[0041] The protection layer is used for pre-establishing a trusted chain; wherein the trusted chain includes a hardware platform, an operating system, a secure trusted application server and a target application;

[0042] The permission configuration layer is used for performing permission configuration on the interface operation directory and the application file of the target application through a trusted middleware, and binding application access permission; wherein the trusted middleware is set through the trusted application server;

[0043] The application access layer is used for acquiring access information according to the application access permission; wherein the access information includes encrypted access and storage access;

[0044] The trusted encryption layer is used for determining the data transmission interface of the target application and the trusted middleware when the access information is encrypted access, and encrypting the target application through a preset trusted password service to determine ciphertext data;

[0045] The trusted storage layer is used for authenticating the login user of the target application through the trusted application server when the access information is storage access, and performing a storage operation of the login user when the authentication is successful.

[0046] The application has the following beneficial effects:

[0047] The present application aims at the problem of malicious network attack and sensitive data leakage caused by weak system protection ability and backward protection device in the financial industry, fuses the trusted computing technology and the application server middleware, and binds the application access permission and the application allowed files and directories through the trusted application server middleware security administrator from the source of the attacked application system, so that the external malicious attack cannot read the system files or execute the system commands illegally even if it breaks into the system through the application layer vulnerability, and the penetration testing attack means is invalidated from the root, and the system 0Day vulnerability problem is solved.

[0048] The present application aims at the problem of sensitive information leakage and application layer file destruction of the application system, exposes the trusted data encryption and trusted data storage function to the application layer through the application server middleware, so that the application layer data is encrypted and stored through the trusted service, and the external attack cannot obtain the sensitive information of the application system or access and tamper the application core files and data even if it breaks into the system.

[0049] Other features and advantages of the present application will be described in the following description, and some will become apparent from the description, or will be understood through implementation of the present application. The purposes and other advantages of the present application can be achieved and obtained through the structure specifically pointed out in the written description and the accompanying drawings.

[0050] The technical solutions of the present application will be further described in detail below through the accompanying drawings and examples. BRIEF DESCRIPTION OF DRAWINGS

[0051] The accompanying drawings are used to provide further understanding of the present application, and constitute a part of the specification, and are used to explain the present application together with the embodiments of the present application, and do not constitute a limitation to the present application. In the drawings:

[0052] Figure 1 The method flow chart of the application server security protection method based on trusted computing in the embodiment of the present application;

[0053] Figure 2 The device composition chart of the application server security protection device based on trusted computing in the embodiment of the present application;

[0054] Figure 3 The composition chart of the application server in the prior art;

[0055] Figure 4 The derivation model chart of the trusted application server for the trusted chain in the embodiment of the present application;

[0056] Figure 5 The architecture chart of the trusted application server middleware security protection system in the embodiment of the present application. DETAILED DESCRIPTION

[0057] The preferred embodiments of the present application are described below in conjunction with the accompanying drawings, it should be understood that the preferred embodiments described herein are only used to illustrate and explain the present application, and are not used to limit the present application.

[0058] As shown in Figure 1 and Figure 5 The embodiment provides a secure protection method for an application server based on trusted computing, which comprises the following steps:

[0059] A trusted chain is built in advance; wherein the trusted chain comprises a hardware platform, an operating system, a secure trusted application server and a target application;

[0060] The interface operation directory and the application file of the target application are configured with permissions through a trusted middleware, and the application access permission is bound; wherein the trusted middleware is set through the secure trusted application server;

[0061] According to the application access permission, access information is obtained; wherein the access information comprises encrypted access and storage access;

[0062] When the access information is encrypted access, the data transmission interface of the target application and the trusted middleware is determined, and the target application is encrypted through a preset trusted password service to determine the ciphertext data;

[0063] When the access information is storage access, the login user of the target application is authenticated through the secure trusted application server, and when the authentication is successful, the storage operation of the login user is executed.

[0064] The principle of the above technical solution is that:

[0065] The hardware platform (hardware server, financial server), operating system (the operating system of the present application, similar to OpenHarmony, OpenHarmony is a generic terminal operating system base, which has been widely used in the financial field. The operating system developed based on OpenHarmony has the advantages of modularity and customization, which can reduce the operation and upgrade cost of financial equipment. At present, there are many financial service terminals and financial Internet of Things terminals based on OpenHarmony in the market), secure trusted application server and target application are first chained in a trusted manner to build a trusted chain. In the specific implementation process, before the application is deployed, the directory and file of all interface operations of the application are configured with permissions by the trusted middleware security administrator, and the application access permission is bound. According to the directory and file touched by the bound application, normal operation is performed to prevent malicious penetration attacks or unauthorized reading of system files or illegal execution of system commands through the upper application.

[0066] The present application is directed to the existing trusted password service in the trusted computing, because the trusted password service in the prior art is based on the trusted module, and provides the password service to the system and the user. By calling the cryptography function in the trusted password module, the functions such as trusted storage, trusted measurement, trusted report, etc. are realized. In the traditional scheme, the capability is not open to the upper application, resulting in that if the application interaction data needs to be encrypted and decrypted, an encryption device (encryption machine, password card, etc.) needs to be additionally added. In view of this problem, the secure trusted application server middleware improves the trusted password service, and opens the function to the upper application, so that the upper business application can directly use the trusted password module to perform the encryption and decryption operation, and the additional device for meeting the encryption and decryption work is reduced.

[0067] In the prior art, the trusted computing protects the system layer file, prevents the attacker from entering from the system layer, and maliciously modifies the check work of the system file. For the upper application, if the attacker attacks from the web end, the file in the application permission directory cannot be protected. In view of this problem, the present application strengthens the trusted computing function, and increases the encryption protection, permission protection, management end information trusted module storage protection, etc. of the important file in the application program,

[0068] The beneficial effects of the above technical scheme are that:

[0069] The present application is directed to the problem of malicious network attack and sensitive data leakage caused by weak system protection ability and backward protection device in the financial industry. The trusted computing technology is fused with the application server middleware, the application access permission and the file and directory allowed to be touched by the application are bound by the trusted application server middleware security administrator, so that even if the external malicious attack breaks through the application layer vulnerability and enters the system interior, the system file cannot be read by exceeding the authority or the system command cannot be executed illegally, the penetration testing attack means is invalidated from the root, and the system 0Day vulnerability problem is solved.

[0070] The present application is directed to the problem of sensitive information leakage and application layer file destruction of the application system. The trusted data encryption and trusted data storage function are exposed to the application layer by the application server middleware, so that the application layer data is encrypted and stored by the trusted service. Even if the external attack breaks through the system outer defense and enters the system interior, the sensitive information of the application system cannot be obtained, or the application core file and data cannot be accessed and tampered.

[0071] As an embodiment of the present application: the pre-built trusted chain further includes:

[0072] According to the hardware platform, a static root of trust is established;

[0073] Trust expansion is performed by booting the trust root through the operating system to determine the target application that can be loaded and executed. During trust expansion, the executable code of the target application meets the preset trust level, the target application meets the trust expansion, and is connected to the trusted chain.

[0074] The number of target applications is greater than or equal to 1;

[0075] The target application's executable code is trusted by the operating system to determine its level of trustworthiness.

[0076] The principle behind the above technical solution is as follows:

[0077] like Figure 4 As shown, for a trusted chain, trust transfer needs to be performed starting from the hardware platform to build the trusted chain. Trust transfer is used to bootstrap the system from a static root of trust. Trust extension includes code that is not in the root of trust. In this trusted extension instance, the target code is first trusted before performing a transfer of control. Only if its trust level is acceptable will trust extension be performed.

[0078] As a link in the chain of trust, the code of a trusted middleware must be loaded and executed. It will be subject to the trustworthiness measurement of the trusted operating system, and only after it meets the trustworthiness requirements will it be trusted by the entire system.

[0079] The beneficial effects of the above technical solution are as follows:

[0080] This invention guarantees the trustworthiness of the trusted application server middleware throughout its entire runtime.

[0081] As one embodiment of the present invention: the management terminal of the trusted middleware is equipped with a three-person security compliance management mechanism; wherein, the three-person security compliance management mechanism presets an administrator and binds trusted operation permissions;

[0082] When configuring permissions, the permission configuration function is triggered if the administrator being configured has trusted operation permissions.

[0083] The principle behind the above technical solution is as follows:

[0084] This invention adopts a three-person management mechanism for information security compliance in the middleware management terminal of the secure and trusted application server. The administrator's operation permissions are based on the trusted operating system and are bound to the administrator's permissions of the trusted operating system. When the trusted operating system is the administrator, the middleware management terminal of the secure and trusted application server is limited to the system administrator who logs in to perform operation configuration, and other users' operations are invalid.

[0085] The beneficial effects of the above technical solution are as follows:

[0086] The application can ensure that only an administrator can perform a trusted operation, and set a trusted operation permission of different applications.

[0087] As an embodiment of the application: the trusted password service includes: national secret SM2 encryption, national secret SM3 encryption, national secret SM4 encryption.

[0088] The principle of the above technical solution is:

[0089] The trusted password service in the existing trusted computing is dependent on a trusted module, and provides a password service to a system and a user.

[0090] The application provides a trusted password service for an application layer, provides national secret SM2, SM3 and SM4 encryption, and meets national secret transformation requirements.

[0091] The above technical solution has the beneficial effects that:

[0092] The security trusted application server middleware of the application improves the trusted password service, opens the function to an upper layer application, so that the upper layer business application can directly use the trusted password module to perform encryption and decryption operations, and reduces the additional equipment for meeting the encryption and decryption work.

[0093] As an embodiment of the application: the interface operation directory and the application file of the target application are configured with permissions through the trusted middleware, and the method further includes:

[0094] According to a trusted chain, an interface operation directory and an application file of a target application are determined, wherein the interface operation directory and the application file correspond to each other;

[0095] According to the trusted middleware, a trust degree of each interface operation directory is determined, and the trust degree and an application configurable permission are mapped and associated to generate a permission configuration association sequence; wherein the application configurable permission is used to represent a permission range that can be configured by different trust degrees;

[0096] According to the permission configuration association sequence, a permission causal chain of the target application is generated;

[0097] According to the permission causal chain, the target application is automatically updated with permissions.

[0098] The principle of the above technical solution is:

[0099] First, the operating system determines the interface operation directory and application file of the target application. In actual implementation, the interface operation directory and the application file are corresponding, that is, the relationship between them is determined. For example, assuming that we are developing a social media application, the application has many user interface elements (such as buttons, menus, etc.) and code files related thereto. These elements and files are the interface operation directory and application file of the target application.

[0100] Second, the operating system uses trusted middleware to determine the trustworthiness of each interface operation directory. Through the trusted middleware, the access history, frequency of use and other related information of each interface operation directory are checked and classified into different levels of trustworthiness. For example, an interface operation directory that is frequently accessed may be considered highly trustworthy, while an interface operation directory that is not frequently used may be considered to have a lower level of trustworthiness.

[0101] Then, the operating system maps the trustworthiness and the application configurable permissions to generate a permission configuration association sequence. The trustworthiness of each interface operation directory is matched with the permissions it can configure, and a permission configuration association sequence is generated according to the matching result. For example, for a highly trustworthy interface operation directory, the operating system may assign it more extensive permissions, while for a low-trustworthy interface operation directory, the operating system may assign it narrower permissions.

[0102] Finally, the system automatically updates the permissions of the target application according to the generated permission configuration association sequence. The security mechanism of the operating system can automatically update the permission settings of the target application according to the current permission configuration association sequence. In this way, even if new or suspicious activities occur, the permission settings of the target application can be adjusted in a timely manner, thereby ensuring the security of the entire operating system and user operation data.

[0103] The beneficial effects of the above technical solution are:

[0104] The corresponding permissions can be automatically updated when the files of the target application are updated according to the permission causal chain, without the need to reconfigure the permissions of the application.

[0105] As an embodiment of the present application, the access information includes:

[0106] According to the application access permission, it is judged whether the associated application of the real-time access request has access permission, wherein:

[0107] When there is access permission, the interface operation directory and the access information of the associated application are determined, wherein the access information is obtained based on the access interface of the interface operation directory;

[0108] The access information of the access interface is identified one by one by the trusted middleware, and the access information is matched with each operation interface in the interface operation directory, and a matching result is determined;

[0109] When the access interface and the access information in the matching result match, a corresponding access operation is performed.

[0110] The principle of the above technical solution is that:

[0111] First, according to the application access permission, it is judged whether the associated application of the real-time access request has access permission. If the associated application does not have corresponding access permission, the real-time access request is sent to the trusted middleware, which performs access control verification. If the real-time access request is a permissionless request, the trusted middleware will return the request. Otherwise, if the associated application has corresponding access permission, the interface operation directory and the access information of the associated application need to be further obtained.

[0112] Next, the access information of the access interface is identified one by one by the trusted middleware, and is matched with each operation interface in the interface operation directory. The matching result is used to determine whether to perform a corresponding access operation. If the matching result is correct, the corresponding access operation is performed. However, if the matching result is incorrect, the connection with the corresponding access interface is cut off.

[0113] The beneficial effects of the above technical solution are that:

[0114] The application can effectively prevent the associated application from mistakenly or misusing the interfaces of other applications without corresponding permissions, thereby protecting the security of the entire operating system and data.

[0115] As an embodiment of the application: the trusted cryptographic service is further used for

[0116] The called trusted cryptographic service is obtained, and a first encryption interface, a first encryption function and a first encryption space configured by the trusted cryptographic service are determined; wherein the first encryption interface, the first encryption function and the first encryption space are called within the permission range by the trusted middleware according to the permission configuration of the target application;

[0117] The data to be encrypted in the target application is transmitted to the first encryption space through the first encryption interface, and is encrypted by the first encryption function, and after the ciphertext data is generated, it is transmitted to the target application; wherein when the data to be encrypted is not unique, the second encryption interface, the second encryption function and the second encryption space configured by the trusted cryptographic service are used, and the second data of the data to be encrypted is transmitted to the second encryption space through the second encryption interface and is encrypted by the second encryption function.

[0118] The principle of the above technical solution is that:

[0119] In addition to the aforementioned interface operation directory and the function of permission configuration of application file, matching check of access information, the application also uses trusted password service to obtain and process password service call. Specifically, the trusted password service is also used to determine the encryption interface, encryption function and encryption space configured by the trusted password service.

[0120] Then, by processing the data to be encrypted in the target application, the data is encrypted through the first encryption interface and the first encryption function, and ciphertext data is generated. If the data to be encrypted is not unique, it also needs to be encrypted again through the second encryption interface, the second encryption function and the second encryption space configured by the trusted password service. After the encryption is completed, the ciphertext data is transmitted back to the target application.

[0121] In the whole process, the values of the encryption interface, the encryption function and the encryption space are called within the permission range by the trusted middleware according to the permission configuration of the target application. It is ensured that only the legal and authorized application can access the corresponding encryption interface, encryption function and encryption space, thereby enhancing the security of the operating system.

[0122] As an embodiment of the application, the authentication and authorization further comprises:

[0123] The trusted application server receives an authentication and authorization request initiated by a login user, wherein the authentication and authorization request carries a trusted value of any target application on the trusted chain;

[0124] The trusted application server sends an authentication and authorization message to the trusted chain, wherein the authentication and authorization message includes the trusted value, and the permission configuration range and the storage permission space carried in the trusted value are determined;

[0125] The trusted server performs a storage operation according to the authentication and authorization response message of the authentication and authorization message.

[0126] The principle of the above technical solution is that:

[0127] The application server security protection method based on trusted computing adds an authentication and authorization link on the basis of realizing permission control. When receiving the authentication and authorization request of the login user, an authentication and authorization message is sent to the trusted chain according to the trusted value of any target application on the trusted chain in the request. In the message, in addition to the trusted value, the permission configuration range and the storage permission space corresponding to the trusted value are also determined.

[0128] Subsequently, the server performs corresponding storage operations according to the received authentication response message. It is ensured that only authorized users or applications can successfully complete authentication, thereby improving the security of the operating system. At the same time, since this process is based on a trusted chain, it also has the characteristics of trusted computing, which can effectively prevent various forms of attack behavior.

[0129] As an embodiment of the present application: the storage operation further comprises:

[0130] Reading the storage data of the logged-in user and determining the storage permissions of the logged-in user;

[0131] According to the storage permissions, determine the data storage location and data storage space of the logged-in user; wherein the storage space is not unique;

[0132] According to the storage location and the storage space, the storage data is divided in capacity and allocated in position, and after the capacity division and position allocation, an independent data channel is re-established, and the storage data is stored through the independent data channel.

[0133] The principle of the above technical solution is:

[0134] The present application determines the storage permissions of the logged-in user by reading the storage data of the logged-in user. The user's identity is recognized and verified to have corresponding permissions to access the storage data.

[0135] According to the storage permissions, determine the data storage location and data storage space of the logged-in user. This is achieved by dividing the storage space into multiple independent areas or folders, each corresponding to a specific user or user group, thereby limiting their ownership and access to data.

[0136] According to the storage location and the storage space, the storage data is divided in capacity and allocated in position. This is done according to factors such as data importance, sensitivity, and usage frequency to ensure data reliability and security.

[0137] The storage data is stored through an independent data channel. An independent data channel is used, which can ensure that even if a data channel fails, it will not affect the normal operation of other data channels, thereby improving the stability and reliability of the operating system.

[0138] As another embodiment of the present application, the present application proposes a secure application server protection device based on trusted computing, comprising:

[0139] Protection layer: used to pre-build a trusted chain; wherein the trusted chain includes a hardware platform, an operating system, a secure trusted application server and a target application;

[0140] The permission configuration layer is configured to configure the interface operation directory and application file of the target application through the trusted middleware to bind the application access permission, wherein the trusted middleware is set through the trusted application server;

[0141] The application access layer is configured to obtain access information according to the application access permission, wherein the access information includes encrypted access and storage access.

[0142] The trusted encryption layer is configured to determine the data transmission interface of the target application and the trusted middleware when the access information is encrypted access, and encrypt the target application through the preset trusted password service to determine the ciphertext data.

[0143] The trusted storage layer is configured to authenticate the login user of the target application through the trusted application server when the access information is storage access, and execute the storage operation of the login user when the authentication is successful.

[0144] The principle of the above technical solution is that:

[0145] As shown in Figure 2 The protection layer of the application first chains the hardware platform, the operating system, the secure trusted application server and the target application, and builds a trusted chain. In the specific implementation process, when before the application is deployed, the directory and file of all interface operations of the application are configured through the trusted middleware security administrator to bind the application access permission, and the directory and file touched by the bound application are normally operated to prevent malicious penetration attacks or unauthorized reading of system files or illegal execution of system commands through the upper layer application. The application access layer of the application can enable the application of the application layer to directly access the upper layer hardware and system through the trusted middleware.

[0146] The application also provides a solution for the trusted password service in the existing trusted computing. The trusted password service of the prior art relies on the trusted module to provide password services to the system and the user. The system calls the cryptographic function in the trusted password module to realize the functions of trusted storage, trusted measurement, trusted reporting, etc. In the traditional scheme, this capability is not open to the upper layer application, resulting in that if the application interaction data needs to be encrypted and decrypted, an encryption device (encryption machine, password card, etc.) needs to be additionally added. To solve this problem, the trusted encryption layer of the application improves the trusted password service through the secure trusted application server middleware, opens this capability to the upper layer application, so that the upper layer business application can directly use the trusted password module to perform encryption and decryption operations, and reduces the need to add additional devices to meet the encryption and decryption work.

[0147] The prior art can protect the system layer file by measurement, prevent the attacker from entering from the system layer, and modify the system file maliciously, and the check work is done, and for the upper application, if the attacker attacks from the web end, the modification of the file in the application permission directory cannot be protected, and in view of the problem, the trusted storage layer of the application strengthens the trusted computing function, and increases the encryption protection, permission protection, management end information trusted module storage protection and the like of the important file in the application program,

[0148] The above technical scheme has the beneficial effects that:

[0149] The application fuses the trusted computing technology and the application server middleware, starts from the source of the attacked application system, binds the application access permission and the file and the directory allowed to be touched by the application through the trusted application server middleware security administrator, so that even if the external malicious attack breaks through the application layer vulnerability and enters the system interior, the system file cannot be read by overstepping the authority or the system command cannot be executed illegally, the penetration testing attack means is invalidated from the root, and the system 0Day vulnerability problem is solved.

[0150] The application fuses the trusted computing technology and the application server middleware, starts from the source of the attacked application system, binds the application access permission and the file and the directory allowed to be touched by the application through the trusted application server middleware security administrator, so that even if the external malicious attack breaks through the application layer vulnerability and enters the system interior, the system file cannot be read by overstepping the authority or the system command cannot be executed illegally, the penetration testing attack means is invalidated from the root, and the system 0Day vulnerability problem is solved.

[0151] Obviously, those skilled in the art can make various modifications and variations to the application without departing from the spirit and scope of the application. Thus, if these modifications and variations of the application belong to the scope of the claims of the application and the equivalent technologies thereof, the application also intends to include these modifications and variations.

Claims

1. A method for protecting an application server based on trusted computing, characterized in that, The application comprises the following steps: A trusted chain is built in advance, wherein the trusted chain comprises a hardware platform, an operating system, a secure trusted application server and a target application; An interface operation directory and application files of the target application are configured with access permissions by the trusted middleware, and the application access permissions are bound; wherein the trusted middleware is set by the trusted application server; Access information is obtained according to the application access permissions; wherein the access information comprises encrypted access and storage access; When the access information is encrypted access, a data transmission interface of the target application and the trusted middleware is determined, and the target application is encrypted by a preset trusted password service to determine ciphertext data; When the access information is storage access, a login user of the target application is authenticated by the trusted application server, and a storage operation of the login user is performed when the authentication is successful.

2. The application server security protection method based on trusted computing according to claim 1, wherein, The trusted chain built in advance further comprises the following steps: A static root of trust is established according to the hardware platform; The root of trust is guided by the operating system to expand the trust, and a target application that can be loaded and executed is determined; wherein when the trust is expanded, the execution code of the target application meets a preset trust degree, the target application meets the trust expansion, and the trusted chain is connected; The number of target applications is greater than or equal to 1; The execution code of the target application is measured for trustworthiness by the operating system to determine the trustworthiness.

3. The method of claim 1, wherein the trusted computing based application server security protection method is characterized by, The management end of the trusted middleware is provided with an equal protection three-member management mechanism; wherein the equal protection three-member management mechanism is bound with trusted operation permissions by a preset administrator; When the access permissions are configured, if the administrator of the access permission configuration has trusted operation permissions, the access permission configuration function is triggered.

4. The application server security protection method based on trusted computing according to claim 1, wherein, The trusted password service comprises national encryption SM2, national encryption SM3 and national encryption SM4.

5. The application server security protection method based on trusted computing according to claim 1, wherein, The access permission configuration of the interface operation directory and the application files of the target application by the trusted middleware further comprises the following steps: According to the trusted chain, the interface operation directory and the application files of the target application are determined, wherein the interface operation directory and the application files correspond to each other; According to the trusted middleware, the trustworthiness of each interface operation directory is determined, and the trustworthiness is mapped and associated with application configurable permissions to generate a permission configuration association sequence; wherein the application configurable permissions are used to represent the permission range that can be configured by different trustworthiness; According to the permission configuration association sequence, a permission causal chain of the target application is generated; According to the permission causal chain, the target application is automatically updated with permissions.

6. The application server security protection method based on trusted computing according to claim 1, wherein, The access information comprises the following steps: According to the application access permissions, it is judged whether the associated application of the real-time access request has access permissions, wherein: When there is no access permission, the real-time access request is sent to the trusted middleware for access control verification, and the real-time access request is returned when the real-time access request belongs to a permissionless request; When there is access permission, the interface operation directory and the access information of the associated application are determined; wherein the access information is obtained based on the access interface of the interface operation directory; The access information of the access interface is identified one by one by the trusted middleware, and the access information is matched with each operation interface in the interface operation directory, and a matching result is determined; When the access interface and the access information in the matching result match, the corresponding access operation is performed. When the access interface and the access information in the matching result do not match, the connection with the corresponding access interface is cut off.

7. The application server security protection method based on trusted computing according to claim 1, wherein, The trusted cryptographic service is further configured to: obtain the called trusted cryptographic service, determine a first encryption interface, a first encryption function, and a first encryption space configured by the trusted cryptographic service; wherein the first encryption interface, the first encryption function, and the first encryption space are called by the trusted middleware within the authority range according to the authority configuration of the target application; transmit the data to be encrypted in the target application to the first encryption space through the first encryption interface, encrypt the data to be encrypted through the first encryption function, and transmit the ciphertext data to the target application after the ciphertext data is generated; wherein when the data to be encrypted is not unique, the second encryption interface, the second encryption function, and the second encryption space configured by the trusted cryptographic service are used, and the second data of the data to be encrypted is transmitted to the second encryption space through the second encryption interface and encrypted through the second encryption function.

8. The application server security protection method based on trusted computing according to claim 1, wherein, The authentication and authorization further includes: receiving an authentication and authorization request initiated by a login user through the trusted application server, wherein the authentication and authorization request carries a trust value of any target application on the trusted chain; the trusted application server sends an authentication and authorization message to the trusted chain, wherein the authentication and authorization message includes the trust value, and the authority configuration range and the storage authority space carried in the trust value are determined; the trusted server performs a storage operation according to an authentication and authorization response message of the authentication and authorization message.

9. The application server security protection method based on trusted computing according to claim 1, wherein, The storage operation further includes: reading the storage data of the login user and determining the storage authority of the login user; determining the data storage location and the data storage space of the login user according to the storage authority; wherein the storage space is not unique; performing capacity division and location allocation on the storage data according to the storage location and the storage space, and re-establishing an independent data channel after the capacity division and the location allocation, and storing the storage data through the independent data channel.

10. A trusted computing based application server security device, characterized by It includes: a protection layer for pre-establishing a trusted chain; wherein the trusted chain includes a hardware platform, an operating system, a secure trusted application server, and a target application; an authority configuration layer for performing authority configuration on the interface operation directory and the application file of the target application through the trusted middleware, and binding the application access authority; wherein the trusted middleware is set through the trusted application server; an application access layer for obtaining access information according to the application access authority; wherein the access information includes encryption access and storage access; a trusted encryption layer for determining the data transmission interface of the target application and the trusted middleware when the access information is encryption access, and encrypting the target application through a preset trusted cryptographic service to determine ciphertext data; a trusted storage layer for authenticating and authorizing the login user of the target application through the trusted application server when the access information is storage access, and performing a storage operation of the login user when the authentication and authorization is successful.

Images