Privacy enhancement method and device based on trusted execution environment, equipment and medium

Abstract

The invention discloses a privacy enhancement method and device based on a trusted execution environment, equipment and a medium, and relates to the field of data processing, and the method comprises the steps: triggering the mirror image creation of the trusted execution environment of a to-be-processed task in a task initialization stage, and obtaining a mirror image environment and a target metric value; a target user certificate request is received, a user certificate is created based on the authoritative authentication service, a task key is initialized based on the key management service, and a user initializes task information with the task key. In the task execution stage, the mirror environment is verified through the remote authentication service, the target metric value and the first preset mechanism, and the user is verified through the authorization service and the second preset mechanism. And if the verification is passed, scheduling the to-be-processed task to a mirror image environment, and performing data processing by using the task key and the target task information obtained by the key management service to obtain a task execution result. Therefore, the privacy enhancement of the data can be effectively realized while the data processing efficiency is guaranteed, so that the security of the data is protected.

Description

Technical Field

[0001] The present invention relates to the field of data processing, and in particular to a privacy enhancement method, device, equipment and medium based on a trusted execution environment. Background Art

[0002] With the rapid development of artificial intelligence and big data technologies, data processing has become increasingly widespread. At present, existing computing environments such as cloud computing and edge computing highlight the security issues of data during processing. These security issues not only affect the availability and integrity of data, but may also bring serious consequences to some application scenarios with high requirements for data security.

[0003] However, existing solutions such as distributed computing frameworks such as Hadoop and Spark can provide the ability to process large-scale data, but lack sufficient security when processing data. In addition, the traditional TEE (Trusted Execution Environment) environment authentication mechanism is mostly simple hardware-level authentication, and single authentication methods are subject to the risk of being bypassed or data leaked.

[0004] Therefore, how to achieve privacy enhancement while ensuring the efficiency of data processing to protect data security is a key issue that needs to be solved urgently. Summary of the invention

[0005] In view of this, the purpose of the present invention is to provide a privacy enhancement method, device, equipment and medium based on a trusted execution environment, which can achieve privacy enhancement while ensuring the efficiency of data processing to protect data security. The specific scheme is as follows:

[0006] In a first aspect, the present application provides a privacy enhancement method based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0007] In the task initialization phase, trigger the trusted execution environment image creation operation corresponding to the task to be processed to obtain the corresponding image environment and the target measurement value corresponding to the image environment;

[0008] When receiving a certificate request sent by a target user, a user certificate corresponding to the certificate request is created based on a local authoritative authentication service, and a task key is initialized based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain target task information;

[0009] During the task execution phase, the mirror environment is verified based on the local remote authentication service, the target metric value and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain an environment verification result and a user verification result;

[0010] If the environment verification result and the user verification result both indicate that the verification is passed, the task to be processed is scheduled to the mirror environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0011] Optionally, the triggering of a trusted execution environment image creation operation corresponding to the task to be processed to obtain a corresponding image environment and a target metric value corresponding to the image environment includes:

[0012] During the trusted execution environment image creation operation, a hash operation is performed based on the content of the obtained image environment to obtain a target metric value corresponding to the image environment, so that the target user can register the target metric value to the local metric management service.

[0013] Optionally, when receiving a certificate request sent by a target user, creating a user certificate corresponding to the certificate request based on a local authority authentication service includes:

[0014] When receiving a certificate request sent by a target user, obtaining public key information and first identity information corresponding to the target user in the certificate request based on a local authoritative authentication service;

[0015] Determine whether the public key information and the first identity information both meet preset conditions to obtain a corresponding determination result;

[0016] If the judgment result indicates that both are satisfied, the public key information and the first identity information are signed using the private key information corresponding to the authoritative authentication service to obtain a user certificate corresponding to the certificate request.

[0017] Optionally, the task key initialization based on the local key management service is performed so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain the target task information, including:

[0018] Creating a target account corresponding to the target user based on a local key management service and using the second identity information of the target user;

[0019] A root key is created based on the target account, and the root key is used to encrypt the initial task key created by the target user and save it to the disk, so that the target user can encrypt the task information of the task to be processed based on the encrypted task key, and determine the task code information corresponding to the task information to obtain the target task information.

[0020] Optionally, the preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base constructed based on a preset container orchestration platform, and a distributed computing underlying framework constructed based on a preset computing cluster system and a preset batch processing and streaming data processing platform; wherein the distributed computing base includes containers for storing applications corresponding to the authoritative authentication service, the key management service, the remote authentication service, the measurement management service, and the authorization service, respectively.

[0021] Optionally, the performing of environmental verification on the mirror environment based on the local remote authentication service, the target metric value, and a first preset multi-level authentication mechanism, and performing of verification on the target user based on the local authorization service and a second preset multi-level authentication mechanism to obtain an environmental verification result and a user verification result, includes:

[0022] Verifying the hardware configuration information, software running information, and security plug-in information in the report of the mirror environment based on the local remote authentication service to obtain a corresponding first verification result;

[0023] Performing integrity verification on the image environment based on the remote authentication service and the target metric value in the local metric management service to obtain a corresponding second verification result, and determining a corresponding environment verification result based on the first verification result and the second verification result;

[0024] Based on the local authorization service, the user name corresponding to the target user, the user certificate and the target signature information are verified to complete the corresponding user identity verification operation and obtain a third verification result; wherein the target signature information is the data obtained by the target user signing the target task information;

[0025] After completing the task execution authority check corresponding to the target user based on the authorization service, if the authority check passes, performing integrity check on the target task information based on the authorization service to obtain a corresponding fourth verification result;

[0026] Performing authenticity verification on the authoritative authentication service signature information in the user certificate based on the authorization service and the public key information corresponding to the target user to obtain a corresponding fifth verification result;

[0027] Based on the authorization service and the to-be-processed resources corresponding to the to-be-processed tasks, performing resource access permission verification and resource operation permission verification on the target user to obtain a corresponding sixth verification result;

[0028] The corresponding user verification result is determined using the third verification result, the fourth verification result, the fifth verification result, and the sixth verification result.

[0029] Optionally, the scheduling of the task to be processed to the mirror environment, and obtaining the task key corresponding to the task to be processed based on the key management service, so as to trigger a corresponding data processing operation using the task key and the target task information, and obtaining a task execution result, includes:

[0030] Submitting the pending task to the preset distributed computing framework so that the preset distributed computing framework schedules the pending task to the mirror environment;

[0031] After requesting the task key corresponding to the task to be processed from the key management service, checking again through the remote authentication service whether the environment verification result corresponding to the mirror environment is verified based on the key management service to obtain a corresponding verification result;

[0032] If the inspection result indicates that the environment verification result is passed, the task key corresponding to the task to be processed will be transmitted to the mirror environment, so that the target task information can be decrypted using the task key in the mirror environment, and the corresponding data processing operation can be triggered based on the decrypted information, and the task execution result can be obtained.

[0033] In a second aspect, the present application provides a privacy enhancement device based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0034] An image creation module is used to trigger the trusted execution environment image creation operation corresponding to the task to be processed during the task initialization phase to obtain the corresponding image environment and the target metric value corresponding to the image environment;

[0035] An information acquisition module, which is used to, when receiving a certificate request sent by a target user, create a user certificate corresponding to the certificate request based on a local authoritative authentication service, and initialize a task key based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain target task information;

[0036] A verification module is used to perform an environmental verification on the mirror environment based on a local remote authentication service, the target metric value and a first preset multi-level authentication mechanism during the task execution phase, and to verify the target user based on a local authorization service and a second preset multi-level authentication mechanism to obtain an environmental verification result and a user verification result;

[0037] A task execution module is used to schedule the task to be processed to the mirror environment if the environment verification result and the user verification result both indicate that the verification is passed, and obtain the task key corresponding to the task to be processed based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0038] In a third aspect, the present application provides an electronic device, including:

[0039] Memory, used to store computer programs;

[0040] A processor is used to execute the computer program to implement the aforementioned privacy enhancement method based on a trusted execution environment.

[0041] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the aforementioned privacy enhancement method based on a trusted execution environment is implemented.

[0042] In the present application, in the task initialization phase, a trusted execution environment image creation operation corresponding to the task to be processed is triggered to obtain the corresponding image environment and the target measurement value corresponding to the image environment; when a certificate request sent by a target user is received, a user certificate corresponding to the certificate request is created based on a local authoritative authentication service, and a task key is initialized based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain the target task information; in the task execution phase, an environment verification is performed on the image environment based on a local remote authentication service, the target measurement value and a first preset multi-level authentication mechanism, and the target user is verified based on a local authorization service and a second preset multi-level authentication mechanism to obtain an environment verification result and a user verification result; if the environment verification result and the user verification result both indicate that the verification is passed, the task to be processed is scheduled to the image environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to trigger the corresponding data processing operation using the task key and the target task information, and obtain the task execution result. As can be seen from the above, in the task initialization phase, the present application triggers the creation of a trusted execution environment image for the task to be processed, and obtains the image environment and target measurement value. Upon receiving a target user certificate request, a user certificate is created based on an authoritative authentication service, and a task key is initialized based on a key management service, and the user uses it to initialize the task information. In the task execution phase, the image environment is verified through a remote authentication service, a target measurement value, and a first preset mechanism, and the user is verified through an authorization service and a second preset mechanism. If all verifications pass, the task to be processed is scheduled to the image environment, and the task key and target task information obtained by the key management service are used for data processing to obtain the task execution result. In this way, the present application can effectively enhance data privacy while ensuring data processing efficiency, thereby protecting data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0044] Figure 1 A flowchart of a privacy enhancement method based on a trusted execution environment disclosed in this application;

[0045] Figure 2 A schematic diagram of a preset distributed computing framework disclosed in this application;

[0046] Figure 3A schematic diagram of the structure of a privacy enhancement device based on a trusted execution environment disclosed in this application;

[0047] Figure 4 This is a structural diagram of an electronic device disclosed in this application. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0049] Existing solutions such as distributed computing frameworks such as Hadoop and Spark can provide the ability to process large-scale data, but lack sufficient security when processing data. In addition, traditional TEE environment authentication mechanisms are mostly simple hardware-level authentication, and single authentication methods are at risk of being bypassed or data leaked. To this end, this application provides a privacy enhancement method based on a trusted execution environment, which can achieve privacy enhancement while ensuring the efficiency of data processing to protect data security.

[0050] See also Figure 1 As shown, an embodiment of the present invention discloses a privacy enhancement method based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0051] Step S11: In the task initialization phase, trigger the trusted execution environment image creation operation corresponding to the task to be processed to obtain the corresponding image environment and the target metric value corresponding to the image environment.

[0052] First of all, it should be explained that in this embodiment, the preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base built based on a preset container orchestration platform, and a distributed computing underlying framework built based on a preset computing cluster system and a preset batch and streaming data processing platform; wherein, the distributed computing base includes containers for storing applications corresponding to authoritative authentication services, key management services, remote authentication services, measurement management services, and authorization services, respectively.

[0053] Specific, combined Figure 2As shown, the preset distributed computing framework manages distributed computing tasks through the k8s cluster (i.e., Kubernetes, a container orchestration platform for automatically deploying, scaling, and managing containerized applications), collaborates with TEE for trusted execution, and builds a complete computing framework through Spark (i.e., Apache Spark, a distributed computing system), Flink (i.e., Apache Flink, a computing platform for distributed data stream processing and batch data processing), Hadoop (i.e., Apache Hadoop, a distributed system infrastructure) and multi-party services. It is further understood that the distributed file storage system in the framework can be a Hadoop system, which is responsible for storing and managing the encrypted processing results after the task processing is completed. The distributed architecture design of the distributed file storage system ensures that each piece of data has a copy, and each copy of the data is stored in each node of the distributed file storage system. This storage method can not only ensure the orderly storage of data, but also when a node has a problem, the data can be efficiently restored from other nodes. The preset container orchestration platform can be k8s, which can automate many manual operations involved in the process of deploying, managing, and scaling containerized applications. The distributed computing base built on the preset container orchestration platform supports the entire data processing process and plays a role in overall coordination. The preset computing cluster system can be a Spark system, and the preset batch processing and streaming data processing platform can be a Flink platform. The distributed computing underlying framework built on the preset computing cluster system and the preset batch processing and streaming data processing platform further enriches the data processing capabilities and methods, enabling it to cope with diverse task requirements. In particular, in the distributed computing base, multiple storage devices for different applications (i.e. Figure 2 These containers correspond to the authentication authority service, key management service, remote authentication service, measurement management service and authorization service. Figure 2 It can be seen that these containers are relatively independent, and the interaction channels between containers are encrypted and protected. In a specific implementation, when these containers call corresponding services to process the same task, information exchange between containers can be achieved. These services can jointly ensure privacy enhancement and security during data processing.

[0054] In this embodiment, during the process of executing the trusted execution environment image creation operation in the task initialization phase, a hash operation is performed based on the content of the obtained image environment to obtain a target measurement value corresponding to the image environment, so that the target user can register the target measurement value with the local measurement management service. It can be understood that the hash operation in this embodiment generates a target measurement value based on the content of the image environment. Therefore, the target measurement value can reflect the characteristics of the image environment. By obtaining the target measurement value, the target user can register it with the local measurement management service. In this way, in the subsequent verification link involving the integrity and consistency of the image environment, it is possible to confirm whether the image environment remains intact and has not been tampered with by comparing the target measurement value.

[0055] Step S12: When a certificate request is received from a target user, a user certificate corresponding to the certificate request is created based on a local authoritative authentication service, and a task key is initialized based on a local key management service, so that the target user can initialize the task information of the task to be processed based on the obtained task key to obtain the target task information.

[0056] In this embodiment, when a certificate request sent by a target user is received, the public key information and the first identity information corresponding to the target user in the certificate request are obtained based on the local authoritative authentication service, and it is determined whether the public key information and the first identity information both meet the preset conditions to obtain a corresponding judgment result. The preset conditions are standards set based on security policies and data protection requirements. For example, it is determined whether the public key information and the first identity information are authentic, whether the format of the public key information meets the prescribed requirements, whether the first identity information matches the registered legal user identity mode, etc. If the judgment result shows that all are satisfied, the public key information and the first identity information are signed using the private key information corresponding to the authoritative authentication service to obtain a user certificate corresponding to the certificate request.

[0057] Subsequently, in this embodiment, a target account corresponding to the target user is created based on the local key management service and using the second identity information of the target user. The second identity information includes the user name and email address of the target user. Next, a root key is created based on the target account, and the initial task key created by the target user is encrypted and stored on the disk using the root key, so that the target user can encrypt the task information of the task to be processed based on the encrypted task key, and determine the task code information corresponding to the task information to obtain the target task information.

[0058] In addition, in the process of building the target task information, in order to ensure the consistency of the tasks to be processed in the trusted execution environment, it is necessary to perform a hash operation on the plaintext data and task code information. The result of the hash operation can uniquely identify the characteristics of the data and code, and can provide a basis for subsequent consistency verification.

[0059] Step S13: During the task execution phase, the mirror environment is verified based on the local remote authentication service, the target metric value, and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain the environment verification result and the user verification result.

[0060] The task execution phase involves comprehensive verification of the image environment and target users. Through local remote authentication services, target metrics, and corresponding preset multi-level authentication mechanisms, the security of the entire image environment and the legitimacy of user operations are ensured, thereby ensuring that the tasks to be processed are executed under safe and reliable conditions.

[0061] In this embodiment, the hardware configuration information, software operation information, and security plug-in information in the report of the mirror environment are verified based on the local remote authentication service to obtain the corresponding first verification result. It is understandable that the remote authentication service can verify the information according to the pre-set verification rules. For example, for the hardware configuration information, it will be checked whether it matches the preset compatible hardware list to prevent potential security risks caused by incompatible hardware. For software operation information, it will verify whether the software is authorized, whether there are security vulnerabilities or signs of tampering.

[0062] Moreover, in this embodiment, it is necessary to perform integrity verification on the mirror environment based on the target measurement value in the remote authentication service and the local measurement management service to obtain a corresponding second verification result, and determine the corresponding environment verification result based on the first verification result and the second verification result. It can be understood that the target measurement value, as a characteristic identifier of the content of the mirror environment, is the key basis for judging whether the mirror environment has been maliciously modified. By comparing the actual state of the current mirror environment with the state represented by the target measurement value, the remote authentication service and the measurement management service can detect whether the mirror environment has been subjected to unauthorized modification. Moreover, in this embodiment, it is necessary to combine the first verification result and the second verification result to determine the environment verification result. Only when these two verification results indicate that the mirror environment is safe can it be confirmed that the mirror environment meets the security requirements for executing the task.

[0063] In this embodiment, the user name, user certificate and target signature information corresponding to the target user are verified based on the local authorization service to complete the corresponding user identity verification operation and obtain the third verification result; wherein the target signature information is the data obtained by the target user signing the target task information. It can be understood that the third verification result is a verification result for the target user's identity, which can reflect whether the target user has the authority to execute the task.

[0064] After completing the task execution authority check corresponding to the target user based on the authorization service, if the authority check passes, the target task information is checked for integrity based on the authorization service to obtain the corresponding fourth verification result. It should be noted that the integrity check is mainly achieved by comparing the hash value of the target task information. During the transmission of the target task information, its hash value should remain unchanged. By calculating the hash value of the currently received target task information and comparing it with the hash value of the target task information at the time of construction, if the two are consistent, it indicates that the target task information has not been tampered with during the transmission process.

[0065] In this embodiment, the authenticity of the signature information of the authoritative authentication service in the user certificate is verified based on the authorization service and the public key information corresponding to the target user to obtain the corresponding fifth verification result; wherein the signature information of the authoritative authentication service is usually generated using the private key information of the target user. Then, based on the authorization service and the resources to be processed corresponding to the task to be processed, the resource access permission and resource operation permission of the target user are verified to obtain the corresponding sixth verification result;

[0066] Finally, the corresponding user verification result is determined using the third verification result, the fourth verification result, the fifth verification result, and the sixth verification result. It should be noted that if an abnormality is found in the environment verification result and the user verification result, such as an unverifiable identity, insufficient execution authority, incomplete target task information, incorrect authoritative certification service signature information, or no resource access rights, the authorization service will refuse to execute the pending task and return relevant error information.

[0067] Step S14: If the environment verification result and the user verification result both indicate that the verification is passed, the task to be processed is scheduled to the mirror environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0068] In this embodiment, the task to be processed is submitted to the preset distributed computing framework so that the preset distributed computing framework schedules the task to be processed to the mirror environment.

[0069] It is understandable that after requesting the task key corresponding to the task to be processed from the key management service, the remote authentication service is used to check again based on the key management service whether the environment verification result corresponding to the mirror environment is verified to obtain the corresponding inspection result. In this embodiment, since the mirror environment may change due to external attacks or other factors in the short time from requesting the task key to obtaining the task key, the security of the mirror environment can be further ensured by re-verification.

[0070] Subsequently, in this embodiment, if the inspection result indicates that the environmental verification result is verified to be passed, the task key corresponding to the task to be processed is transmitted to the mirror environment, so that the target task information is decrypted using the task key in the mirror environment, and the corresponding data processing operation is triggered based on the decrypted information, and the task execution result is obtained. Moreover, after the data processing operation is completed, the task execution result is encrypted using the key and saved in each node of the distributed file storage system in the form of a distributed file storage system.

[0071] As can be seen from the above, in the task initialization phase, the present application triggers the creation of a trusted execution environment image for the task to be processed, and obtains the image environment and target measurement value. Upon receiving a target user certificate request, a user certificate is created based on an authoritative authentication service, and a task key is initialized based on a key management service, and the user uses it to initialize the task information. In the task execution phase, the image environment is verified through a remote authentication service, a target measurement value, and a first preset mechanism, and the user is verified through an authorization service and a second preset mechanism. If all verifications pass, the task to be processed is scheduled to the image environment, and the task key and target task information obtained by the key management service are used for data processing to obtain the task execution result. In this way, the present application can effectively enhance data privacy while ensuring data processing efficiency, thereby protecting data security.

[0072] The technical solution of this application is described in detail below in conjunction with specific application scenarios.

[0073] In a specific implementation, for financial data processing scenarios, especially when it involves the processing and analysis of large-scale transaction data, it is necessary to protect sensitive data such as customer financial information or transaction records.

[0074] Specifically, when financial institutions process transaction data, they first use the trusted execution environment image building process to ensure the security of the computing environment. During the building process, the code and related information used for transaction data calculation are integrated into the resulting image environment, and a specific measurement value (i.e., the target measurement value) is generated. This measurement value is obtained by hashing the image environment content and key codes, and reflects the characteristics of the image content. Financial institutions can register this measurement value with the measurement management service. When using this image environment later, by comparing it with the measurement value in the measurement management service, the integrity and consistency of the image environment can be effectively verified to ensure that the image environment has not been modified or tampered with.

[0075] Task keys play a key role in the training of machine learning models related to financial data payment. Task keys are provided by the key management service and are used to encrypt transaction data to ensure the security of data during storage and transmission. In addition, the execution of tasks is allowed only after successful remote authentication. In this process, the task key will be authorized for use after confirmation by the remote authorization service to prevent data leakage.

[0076] After the data analysis is completed, the data processing results, such as complaint monitoring or transaction risk assessment, will be stored in a distributed file system in an encrypted manner. The distributed file system is implemented based on technologies such as Hadoop, which has the characteristics of data redundancy backup. Even if a node has a problem, the data can still be restored from other nodes, ensuring the persistence and availability of the data.

[0077] In another specific implementation, for medical data processing scenarios, patient data is often extremely sensitive. Whether it is executing the training of machine learning models such as disease prediction algorithms, or processing sensitive data during scientific research, this technical solution can provide a reliable method for processing and protecting medical data.

[0078] Specifically, the mirror environment plays a core security protection role in this scenario. Only medical staff who hold a certificate (i.e., user certificate) issued by an authoritative authentication service can access the analysis service of the medical system. When staff apply to the authoritative authentication service, they need to provide public key information and other identity authentication information. After verification, the authoritative authentication service uses the private key to sign and generate a user certificate. When accessing the analysis service of the medical system, the authorization service will check the validity of the user certificate to ensure the legitimacy of the access.

[0079] At the same time, the encryption data provided by the key management service ensures the security of medical records. During the data analysis process, patient data is only decrypted and analyzed within the mirror environment. The remote authentication service ensures the integrity of the mirror environment. The remote authentication service and the measurement management service work together to prevent the mirror environment from being tampered with or invaded by malware. The remote authentication service will perform a detailed verification of the report of the mirror environment, including information such as hardware configuration, running software, and security plug-ins. At the same time, it will perform integrity verification of the mirror environment in combination with the measurement values ​​in the measurement management service to ensure the security of the data processing environment.

[0080] After the analysis is completed, the authorization service is used to manage the generation and access of diagnosis and treatment results, ensuring that only doctors authorized by the system have the right to access encrypted medical records. The authorization service will perform multiple checks, including verifying the identity, role and authority of the doctor, checking the integrity and signature of the diagnosis and treatment result information (i.e. target task information) (i.e. target signature information), and confirming the doctor's access rights to related resources, to fully protect the security and privacy of medical data.

[0081] Therefore, through the application demonstrations of these different scenarios, it can be seen that the present application can provide comprehensive and effective protection for data security in different application scenarios in the fields of large-scale data processing, machine learning, deep learning, and generative artificial intelligence. There are complete data security and integrity operation steps in the data transmission, calculation, and storage processes, which fully reflects the convenience and security of the technical solution of the present application in various application scenarios.

[0082] Accordingly, see Figure 3 As shown, the embodiment of the present application also provides a privacy enhancement device based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0083] The image creation module 11 is used to trigger the trusted execution environment image creation operation corresponding to the task to be processed during the task initialization phase to obtain the corresponding image environment and the target metric value corresponding to the image environment;

[0084] The information acquisition module 12 is used for, when receiving a certificate request sent by a target user, creating a user certificate corresponding to the certificate request based on a local authoritative authentication service, and initializing a task key based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain target task information;

[0085] The verification module 13 is used to perform an environmental verification on the mirror environment based on the local remote authentication service, the target metric value and the first preset multi-level authentication mechanism during the task execution phase, and to verify the target user based on the local authorization service and the second preset multi-level authentication mechanism to obtain an environmental verification result and a user verification result;

[0086] The task execution module 14 is used to schedule the task to be processed to the mirror environment if the environment verification result and the user verification result both indicate that the verification is passed, and obtain the task key corresponding to the task to be processed based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0087] As can be seen from the above, in the task initialization phase, the present application triggers the creation of a trusted execution environment image for the task to be processed, and obtains the image environment and target measurement value. Upon receiving a target user certificate request, a user certificate is created based on an authoritative authentication service, and a task key is initialized based on a key management service, and the user uses it to initialize the task information. In the task execution phase, the image environment is verified through a remote authentication service, a target measurement value, and a first preset mechanism, and the user is verified through an authorization service and a second preset mechanism. If all verifications pass, the task to be processed is scheduled to the image environment, and the task key and target task information obtained by the key management service are used for data processing to obtain the task execution result. In this way, the present application can effectively enhance data privacy while ensuring data processing efficiency, thereby protecting data security.

[0088] In some specific implementations, the image creation module 11 may specifically include:

[0089] The measurement value acquisition unit is used to perform a hash operation based on the content of the obtained image environment during the process of executing the trusted execution environment image creation operation to obtain a target measurement value corresponding to the image environment, so that the target user can register the target measurement value to the local measurement management service.

[0090] In some specific implementations, the information acquisition module 12 may specifically include:

[0091] A first information acquisition unit, configured to, when receiving a certificate request sent by a target user, acquire, based on a local authoritative authentication service, public key information and first identity information corresponding to the target user in the certificate request;

[0092] An information judgment unit, used to judge whether the public key information and the first identity information both meet preset conditions to obtain a corresponding judgment result;

[0093] The certificate creation unit is used to sign the public key information and the first identity information using the private key information corresponding to the authoritative authentication service if the judgment result indicates that all the conditions are met, so as to obtain a user certificate corresponding to the certificate request.

[0094] In some specific implementations, the information acquisition module 12 may specifically include:

[0095] An account creation unit, configured to create a target account corresponding to the target user based on a local key management service and using the second identity information of the target user;

[0096] The second information acquisition unit is used to create a root key based on the target account, and use the root key to encrypt the initial task key created by the target user and store it on the disk, so that the target user can encrypt the task information of the task to be processed based on the encrypted task key, and determine the task code information corresponding to the task information to obtain the target task information.

[0097] In some specific embodiments, the preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base constructed based on a preset container orchestration platform, and a distributed computing underlying framework constructed based on a preset computing cluster system and a preset batch processing and streaming data processing platform; wherein the distributed computing base includes containers for storing applications corresponding to the authoritative authentication service, the key management service, the remote authentication service, the measurement management service, and the authorization service, respectively.

[0098] In some specific implementations, the verification module 13 may specifically include:

[0099] A first verification unit, configured to verify the hardware configuration information, software operation information, and security plug-in information in the report of the mirror environment based on a local remote authentication service to obtain a corresponding first verification result;

[0100] A second verification unit is used to perform integrity verification on the image environment based on the target metric value in the remote authentication service and the local metric management service to obtain a corresponding second verification result, and determine a corresponding environment verification result based on the first verification result and the second verification result;

[0101] A third verification unit is used to verify the user name corresponding to the target user, the user certificate and the target signature information based on the local authorization service to complete the corresponding user identity verification operation and obtain a third verification result; wherein the target signature information is the data obtained by the target user signing the target task information;

[0102] A fourth verification unit is used to perform an integrity check on the target task information based on the authorization service if the authority check passes after completing the task execution authority check corresponding to the target user based on the authorization service to obtain a corresponding fourth verification result;

[0103] a fifth verification unit, configured to verify the authenticity of the signature information of the authoritative authentication service in the user certificate based on the authorization service and the public key information corresponding to the target user, so as to obtain a corresponding fifth verification result;

[0104] A sixth verification unit, configured to perform resource access permission verification and resource operation permission verification on the target user based on the authorization service and the to-be-processed resources corresponding to the to-be-processed task, so as to obtain a corresponding sixth verification result;

[0105] The result determination unit is used to determine a corresponding user verification result by using the third verification result, the fourth verification result, the fifth verification result and the sixth verification result.

[0106] In some specific implementations, the task execution module 14 may specifically include:

[0107] A task scheduling unit, used for submitting the to-be-processed task to the preset distributed computing framework, so that the preset distributed computing framework schedules the to-be-processed task to the mirror environment;

[0108] A result acquisition unit is used to check whether the environment verification result corresponding to the mirror environment is verified through the remote authentication service again based on the key management service after requesting the task key corresponding to the task to be processed from the key management service, so as to obtain a corresponding inspection result;

[0109] A data processing unit is used to transmit the task key corresponding to the task to be processed to the mirror environment if the inspection result indicates that the environment verification result is verified to be passed, so as to use the task key to decrypt the target task information in the mirror environment, and trigger corresponding data processing operations based on the decrypted information obtained, and obtain the task execution result.

[0110] Furthermore, the present application also discloses an electronic device. Figure 4It is a structural diagram of an electronic device 20 shown according to an exemplary embodiment, and the content in the figure cannot be regarded as any limitation on the scope of use of this application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input and output interface 25 and a communication bus 26. Among them, the memory 22 is used to store a computer program, and the computer program is loaded and executed by the processor 21 to implement the relevant steps in the privacy enhancement method based on a trusted execution environment disclosed in any of the aforementioned embodiments. In addition, the electronic device 20 in this embodiment can specifically be an electronic computer.

[0111] In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0112] In addition, the memory 22 as a carrier for resource storage may be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon may include an operating system 221, a computer program 222, etc., and the storage method may be temporary storage or permanent storage.

[0113] The operating system 221 is used to manage and control the hardware devices and computer programs 222 on the electronic device 20, which can be Windows Server, Netware, Unix, Linux, etc. In addition to including computer programs that can be used to complete the privacy enhancement method based on the trusted execution environment executed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include computer programs that can be used to complete other specific tasks.

[0114] Furthermore, the present application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the privacy enhancement method based on a trusted execution environment disclosed above is implemented. For the specific steps of the method, reference may be made to the corresponding contents disclosed in the aforementioned embodiments, and no further description will be given here.

[0115] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0116] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0117] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0118] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0119] The technical solution provided by the present application is introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for general technicians in this field, according to the idea of ​​the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A privacy enhancement method based on a trusted execution environment, characterized in that: Applicable to data processing systems created based on a preset distributed computing framework, including: In the task initialization phase, trigger the trusted execution environment image creation operation corresponding to the task to be processed to obtain the corresponding image environment and the target measurement value corresponding to the image environment; When receiving a certificate request sent by a target user, a user certificate corresponding to the certificate request is created based on a local authoritative authentication service, and a task key is initialized based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain target task information; During the task execution phase, the mirror environment is verified based on the local remote authentication service, the target metric value and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain an environment verification result and a user verification result; If the environment verification result and the user verification result both indicate that the verification is passed, the task to be processed is scheduled to the mirror environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

2. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that: The triggering of the trusted execution environment image creation operation corresponding to the task to be processed to obtain the corresponding image environment and the target metric value corresponding to the image environment includes: During the trusted execution environment image creation operation, a hash operation is performed based on the content of the obtained image environment to obtain a target metric value corresponding to the image environment, so that the target user can register the target metric value to the local metric management service.

3. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that: When receiving a certificate request sent by a target user, creating a user certificate corresponding to the certificate request based on a local authority authentication service includes: When receiving a certificate request sent by a target user, obtaining public key information and first identity information corresponding to the target user in the certificate request based on a local authoritative authentication service; Determine whether the public key information and the first identity information both meet preset conditions to obtain a corresponding determination result; If the judgment result indicates that both are satisfied, the public key information and the first identity information are signed using the private key information corresponding to the authoritative authentication service to obtain a user certificate corresponding to the certificate request.

4. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that: The local key management service performs task key initialization so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain target task information, including: Creating a target account corresponding to the target user based on a local key management service and using the second identity information of the target user; A root key is created based on the target account, and the root key is used to encrypt the initial task key created by the target user and save it to the disk, so that the target user can encrypt the task information of the task to be processed based on the encrypted task key, and determine the task code information corresponding to the task information to obtain the target task information.

5. The privacy enhancement method based on a trusted execution environment according to claim 2, characterized in that: The preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base built based on a preset container orchestration platform, and a distributed computing underlying framework built based on a preset computing cluster system and a preset batch processing and streaming data processing platform; wherein the distributed computing base includes containers for storing applications corresponding to the authoritative authentication service, the key management service, the remote authentication service, the measurement management service, and the authorization service, respectively.

6. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that: The mirror environment is verified based on the local remote authentication service, the target metric value and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain an environment verification result and a user verification result, including: Verifying the hardware configuration information, software running information, and security plug-in information in the report of the mirror environment based on the local remote authentication service to obtain a corresponding first verification result; Performing integrity verification on the image environment based on the remote authentication service and the target metric value in the local metric management service to obtain a corresponding second verification result, and determining a corresponding environment verification result based on the first verification result and the second verification result; Based on the local authorization service, the user name corresponding to the target user, the user certificate and the target signature information are verified to complete the corresponding user identity verification operation and obtain a third verification result; wherein the target signature information is the data obtained by the target user signing the target task information; After completing the task execution authority check corresponding to the target user based on the authorization service, if the authority check passes, performing integrity check on the target task information based on the authorization service to obtain a corresponding fourth verification result; Performing authenticity verification on the authoritative authentication service signature information in the user certificate based on the authorization service and the public key information corresponding to the target user to obtain a corresponding fifth verification result; Based on the authorization service and the to-be-processed resources corresponding to the to-be-processed tasks, performing resource access permission verification and resource operation permission verification on the target user to obtain a corresponding sixth verification result; The corresponding user verification result is determined using the third verification result, the fourth verification result, the fifth verification result, and the sixth verification result.

7. The privacy enhancement method based on a trusted execution environment according to any one of claims 1 to 6, characterized in that: The scheduling of the task to be processed to the mirror environment, and obtaining the task key corresponding to the task to be processed based on the key management service, so as to trigger a corresponding data processing operation using the task key and the target task information, and obtaining a task execution result, includes: Submitting the pending task to the preset distributed computing framework so that the preset distributed computing framework schedules the pending task to the mirror environment; After requesting the task key corresponding to the task to be processed from the key management service, checking again through the remote authentication service whether the environment verification result corresponding to the mirror environment is verified based on the key management service to obtain a corresponding verification result; If the inspection result indicates that the environment verification result is passed, the task key corresponding to the task to be processed will be transmitted to the mirror environment, so that the target task information can be decrypted using the task key in the mirror environment, and the corresponding data processing operation can be triggered based on the decrypted information, and the task execution result can be obtained.

8. A privacy enhancement device based on a trusted execution environment, characterized in that: Applicable to data processing systems created based on a preset distributed computing framework, including: An image creation module is used to trigger the trusted execution environment image creation operation corresponding to the task to be processed during the task initialization phase to obtain the corresponding image environment and the target metric value corresponding to the image environment; An information acquisition module, which is used to, when receiving a certificate request sent by a target user, create a user certificate corresponding to the certificate request based on a local authoritative authentication service, and initialize a task key based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain target task information; A verification module is used to perform an environmental verification on the mirror environment based on a local remote authentication service, the target metric value and a first preset multi-level authentication mechanism during the task execution phase, and to verify the target user based on a local authorization service and a second preset multi-level authentication mechanism to obtain an environmental verification result and a user verification result; A task execution module is used to schedule the task to be processed to the mirror environment if the environment verification result and the user verification result both indicate that the verification is passed, and obtain the task key corresponding to the task to be processed based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

9. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor, configured to execute the computer program to implement the privacy enhancement method based on a trusted execution environment as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: Used to store a computer program; wherein, when the computer program is executed by a processor, the privacy enhancement method based on a trusted execution environment as described in any one of claims 1 to 7 is implemented.

Images