Privacy enhancement method and apparatus based on trusted execution environment, device, and medium

Abstract

The application discloses a privacy enhancement method and device based on a trusted execution environment, equipment and a medium, relates to the field of data processing, and comprises the following steps: in a task initialization stage, triggering trusted execution environment image creation of a to-be-processed task, obtaining an image environment and a target measurement value. Receiving a target user certificate request, creating a user certificate based on an authoritative authentication service, initializing a task key based on a key management service, and initializing task information by the user. In the task execution stage, the image environment is verified through a remote authentication service, the target measurement value and a first preset mechanism, and the user is verified through an authorization service and a second preset mechanism. If both verifications are passed, the to-be-processed task is scheduled to the image environment, data processing is performed by using the task key obtained by the key management service and the target task information, and a task execution result is obtained. Therefore, the application can effectively realize privacy enhancement of data while guaranteeing data processing efficiency, thereby protecting the security of data.

Description

Technical Field

[0001] The present invention relates to the field of data processing, and in particular to a privacy enhancement method, apparatus, device and medium based on a trusted execution environment. Background Art

[0002] With the rapid development of artificial intelligence and big data technologies, data processing is becoming increasingly widespread. Existing computing environments, such as cloud computing and edge computing, have highlighted security issues during data processing. These security issues not only affect data availability and integrity but can also have serious consequences for applications requiring high data security.

[0003] However, existing solutions, such as distributed computing frameworks like Hadoop and Spark, can handle large amounts of data but lack sufficient security assurance when doing so. Furthermore, traditional TEE (Trusted Execution Environment) authentication mechanisms often rely on simple hardware-level authentication, and single authentication methods often carry the risk of being bypassed or leaking data.

[0004] Therefore, how to achieve privacy enhancement while ensuring the efficiency of data processing to protect data security is a key issue that needs to be solved urgently. Summary of the Invention

[0005] In view of this, the purpose of the present invention is to provide a privacy enhancement method, apparatus, device, and medium based on a trusted execution environment, which can achieve privacy enhancement while ensuring data processing efficiency to protect data security. The specific solution is as follows:

[0006] In a first aspect, the present application provides a privacy enhancement method based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0007] In the task initialization phase, triggering the trusted execution environment image creation operation corresponding to the task to be processed to obtain the corresponding image environment and the target measurement value corresponding to the image environment;

[0008] When receiving a certificate request from a target user, a user certificate corresponding to the certificate request is created based on a local authentication authority service, and a task key is initialized based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain the target task information;

[0009] During the task execution phase, the mirror environment is verified based on the local remote authentication service, the target metric value, and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain an environment verification result and a user verification result;

[0010] If both the environment verification result and the user verification result indicate that the verification is passed, the task to be processed is scheduled to the mirror environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0011] Optionally, triggering a trusted execution environment image creation operation corresponding to the task to be processed to obtain a corresponding image environment and a target metric value corresponding to the image environment includes:

[0012] During the trusted execution environment image creation operation, a hash operation is performed based on the content of the obtained image environment to obtain a target metric value corresponding to the image environment, so that the target user can register the target metric value to the local metric management service.

[0013] Optionally, upon receiving a certificate request sent by a target user, creating a user certificate corresponding to the certificate request based on a local authentication authority service includes:

[0014] When receiving a certificate request sent by a target user, obtaining the public key information and first identity information corresponding to the target user in the certificate request based on a local authoritative authentication service;

[0015] Determining whether the public key information and the first identity information both meet preset conditions to obtain a corresponding determination result;

[0016] If the judgment result indicates that both conditions are satisfied, the public key information and the first identity information are signed using the private key information corresponding to the authoritative authentication service to obtain a user certificate corresponding to the certificate request.

[0017] Optionally, the local key management service performs task key initialization so that the target user initializes the task information of the pending task based on the obtained task key to obtain target task information, including:

[0018] Creating a target account corresponding to the target user based on a local key management service and using the second identity information of the target user;

[0019] A root key is created based on the target account, and the root key is used to encrypt the initial task key created by the target user and save it to disk, so that the target user can encrypt the task information of the task to be processed based on the encrypted task key, and determine the task code information corresponding to the task information to obtain the target task information.

[0020] Optionally, the preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base constructed based on a preset container orchestration platform, and a distributed computing underlying framework constructed based on a preset computing cluster system and a preset batch processing and streaming data processing platform; wherein, the distributed computing base includes containers for respectively storing applications corresponding to the authoritative authentication service, the key management service, the remote authentication service, the measurement management service, and the authorization service.

[0021] Optionally, the performing of environmental verification on the mirror environment based on the local remote authentication service, the target metric value, and a first preset multi-level authentication mechanism, and the performing of verification on the target user based on the local authorization service and a second preset multi-level authentication mechanism to obtain an environmental verification result and a user verification result, including:

[0022] Verifying the hardware configuration information, software running information, and security plug-in information in the report of the mirror environment based on a local remote authentication service to obtain a corresponding first verification result;

[0023] Performing an integrity check on the mirror environment based on the target metric value in the remote authentication service and the local metric management service to obtain a corresponding second verification result, and determining a corresponding environment verification result based on the first verification result and the second verification result;

[0024] Verifying the user name, user certificate, and target signature information corresponding to the target user based on a local authorization service to complete a corresponding user identity verification operation and obtain a third verification result; wherein the target signature information is data obtained by the target user signing the target task information;

[0025] After completing the task execution authority check corresponding to the target user based on the authorization service, if the authority check passes, performing an integrity check on the target task information based on the authorization service to obtain a corresponding fourth verification result;

[0026] performing authenticity verification on the signature information of the authentication authority in the user certificate based on the authorization service and the public key information corresponding to the target user to obtain a corresponding fifth verification result;

[0027] Based on the authorization service and the to-be-processed resource corresponding to the to-be-processed task, performing resource access permission verification and resource operation permission verification on the target user to obtain a corresponding sixth verification result;

[0028] A corresponding user verification result is determined using the third verification result, the fourth verification result, the fifth verification result, and the sixth verification result.

[0029] Optionally, the step of scheduling the pending task to the mirror environment and obtaining the task key corresponding to the pending task based on the key management service, triggering a corresponding data processing operation using the task key and the target task information, and obtaining a task execution result includes:

[0030] Submitting the pending task to the preset distributed computing framework so that the preset distributed computing framework schedules the pending task to the mirror environment;

[0031] After requesting the task key corresponding to the to-be-processed task from the key management service, checking again through the remote authentication service based on the key management service whether the environment verification result corresponding to the mirror environment passes verification, so as to obtain a corresponding verification result;

[0032] If the inspection result indicates that the environment verification result is passed, the task key corresponding to the task to be processed will be transmitted to the mirror environment, so that the target task information can be decrypted using the task key in the mirror environment, and the corresponding data processing operation can be triggered based on the decrypted information, and the task execution result can be obtained.

[0033] In a second aspect, the present application provides a privacy enhancement device based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0034] An image creation module is used to trigger the trusted execution environment image creation operation corresponding to the task to be processed during the task initialization phase to obtain the corresponding image environment and the target measurement value corresponding to the image environment;

[0035] an information acquisition module configured to, upon receiving a certificate request from a target user, create a user certificate corresponding to the certificate request based on a local authentication authority service, and initialize a task key based on a local key management service, so that the target user can initialize the task information of the task to be processed based on the obtained task key to obtain target task information;

[0036] A verification module is used to perform an environmental verification on the mirror environment based on a local remote authentication service, the target metric value, and a first preset multi-level authentication mechanism during the task execution phase, and to verify the target user based on a local authorization service and a second preset multi-level authentication mechanism to obtain an environmental verification result and a user verification result;

[0037] A task execution module is used to schedule the task to be processed to the mirror environment if the environment verification result and the user verification result both indicate that the verification is passed, and obtain the task key corresponding to the task to be processed based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0038] In a third aspect, the present application provides an electronic device, comprising:

[0039] Memory, used to store computer programs;

[0040] A processor is used to execute the computer program to implement the aforementioned privacy enhancement method based on a trusted execution environment.

[0041] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the aforementioned privacy enhancement method based on a trusted execution environment is implemented.

[0042] In the present application, in the task initialization phase, a trusted execution environment mirror creation operation corresponding to the task to be processed is triggered to obtain the corresponding mirror environment and the target measurement value corresponding to the mirror environment; when a certificate request sent by the target user is received, a user certificate corresponding to the certificate request is created based on the local authoritative authentication service, and the task key is initialized based on the local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain the target task information; in the task execution phase, the mirror environment is verified based on the local remote authentication service, the target measurement value and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain the environment verification result and the user verification result; if the environment verification result and the user verification result both indicate that the verification is passed, the task to be processed is scheduled to the mirror environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result. As can be seen from the above, in the task initialization phase, this application triggers the creation of a trusted execution environment mirror for the task to be processed, and obtains the mirror environment and target measurement value. Upon receiving the target user certificate request, a user certificate is created based on the authoritative authentication service, and the task key is initialized based on the key management service, and the user uses it to initialize the task information. In the task execution phase, the mirror environment is verified through the remote authentication service, the target measurement value and the first preset mechanism, and the user is verified through the authorization service and the second preset mechanism. If all the verifications pass, the task to be processed is scheduled to the mirror environment, and the task key and target task information obtained by the key management service are used for data processing to obtain the task execution result. In this way, this application can effectively enhance the privacy of data while ensuring data processing efficiency, thereby protecting the security of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0044] Figure 1 A flowchart of a privacy enhancement method based on a trusted execution environment disclosed in this application;

[0045] Figure 2 A schematic diagram of a preset distributed computing framework disclosed in this application;

[0046] Figure 3This is a schematic diagram of the structure of a privacy enhancement device based on a trusted execution environment disclosed in this application;

[0047] Figure 4 This is a structural diagram of an electronic device disclosed in this application. DETAILED DESCRIPTION

[0048] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0049] Existing solutions, such as distributed computing frameworks like Hadoop and Spark, can handle large amounts of data, but they lack sufficient security guarantees when processing data. Furthermore, traditional TEE environment authentication mechanisms are mostly simple hardware-level authentication, and single authentication methods often carry the risk of being bypassed or leaking data. Therefore, this application provides a privacy-enhancing method based on a trusted execution environment (TEE), which can achieve privacy enhancement while ensuring data processing efficiency, thereby protecting data security.

[0050] See also Figure 1 As shown, an embodiment of the present invention discloses a privacy enhancement method based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0051] Step S11: During the task initialization phase, a trusted execution environment image creation operation corresponding to the task to be processed is triggered to obtain a corresponding image environment and a target metric value corresponding to the image environment.

[0052] First of all, it should be explained that in this embodiment, the preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base built based on a preset container orchestration platform, and a distributed computing underlying framework built based on a preset computing cluster system and a preset batch and streaming data processing platform; wherein, the distributed computing base includes containers for storing applications corresponding to authoritative authentication services, key management services, remote authentication services, measurement management services, and authorization services, respectively.

[0053] Specific, combined Figure 2As shown, the pre-configured distributed computing framework manages distributed computing tasks through a Kubernetes cluster (i.e., Kubernetes, a container orchestration platform for automatically deploying, scaling, and managing containerized applications), collaborates with TEEs for trusted execution, and collaboratively builds a complete computing framework using Spark (i.e., Apache Spark, a distributed computing system), Flink (i.e., Apache Flink, a computing platform for distributed data stream processing and batch data processing), Hadoop (i.e., Apache Hadoop, a distributed system infrastructure), and multiple services. It is further important to understand that the distributed file storage system in this framework can be a Hadoop system, responsible for storing and managing the encrypted results after task processing. The distributed architecture of the distributed file storage system ensures that each piece of data has a copy, which is stored on each node of the distributed file storage system. This storage method not only ensures orderly data storage but also allows for efficient data recovery from other nodes if a node experiences an issue. The pre-configured container orchestration platform can be Kubernetes, which automates many of the manual operations involved in deploying, managing, and scaling containerized applications. The distributed computing foundation built on the pre-configured container orchestration platform supports the entire data processing process and plays a coordinating role. The preset computing cluster system can be a Spark system, and the preset batch processing and streaming data processing platform can be a Flink platform. The distributed computing underlying framework built on the preset computing cluster system and the preset batch processing and streaming data processing platform further enriches the data processing capabilities and methods, enabling it to cope with diverse task requirements. In particular, it should be pointed out that in the distributed computing base, multiple storage devices for different applications (i.e. Figure 2 These containers correspond to the authority authentication service, key management service, remote authentication service, measurement management service and authorization service. Figure 2 As can be seen, these containers are relatively independent, and the communication channels between them are encrypted and protected. In one specific implementation, when these containers call corresponding services to process the same task, information exchange between the containers is possible. These services can jointly ensure enhanced privacy and security during data processing.

[0054] In this embodiment, during the process of executing the trusted execution environment image creation operation in the task initialization phase, a hash operation is performed based on the content of the obtained image environment to obtain a target measurement value corresponding to the image environment, so that the target user can register the target measurement value with the local measurement management service. It can be understood that the hash operation in this embodiment generates a target measurement value based on the content of the image environment. Therefore, the target measurement value can reflect the characteristics of the image environment. By obtaining the target measurement value, the target user can register it with the local measurement management service. In this way, in the subsequent verification link involving the integrity and consistency of the image environment, it is possible to confirm whether the image environment remains intact and has not been tampered with by comparing the target measurement value.

[0055] Step S12: When a certificate request is received from a target user, a user certificate corresponding to the certificate request is created based on a local authoritative authentication service, and a task key is initialized based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain the target task information.

[0056] In this embodiment, when a certificate request sent by a target user is received, the public key information and first identity information corresponding to the target user in the certificate request are obtained based on a local authoritative authentication service, and it is determined whether the public key information and the first identity information both meet preset conditions to obtain a corresponding judgment result. The preset conditions are standards set based on security policies and data protection requirements. For example, it is determined whether the public key information and the first identity information are authentic, whether the format of the public key information meets the prescribed requirements, whether the first identity information matches the registered legal user identity model, etc. If the judgment result indicates that all are met, the public key information and the first identity information are signed using the private key information corresponding to the authoritative authentication service to obtain a user certificate corresponding to the certificate request.

[0057] Subsequently, in this embodiment, a target account corresponding to the target user is created based on the local key management service and using the target user's second identity information. This second identity information includes, for example, the target user's username and email address. Next, a root key is created based on the target account, and the initial task key created by the target user is encrypted and stored on disk using this root key. The target user then encrypts the task information of the pending task using the encrypted task key and determines the task code information corresponding to the task information to obtain the target task information.

[0058] Furthermore, during the target task information construction process, hashing of the plaintext data and task code information is required to ensure the consistency of the tasks to be processed within the trusted execution environment. The hashing result uniquely identifies the characteristics of the data and code, providing a basis for subsequent consistency verification.

[0059] Step S13: During the task execution phase, the mirror environment is verified based on the local remote authentication service, the target metric value, and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain the environment verification result and the user verification result.

[0060] The task execution phase involves comprehensive verification of the image environment and target users. Through local remote authentication services, target metrics, and corresponding preset multi-level authentication mechanisms, the security of the entire image environment and the legitimacy of user operations are ensured, thereby ensuring that the tasks to be processed are executed under safe and reliable conditions.

[0061] In this embodiment, a local remote authentication service verifies the hardware configuration information, software operation information, and security plug-in information in the image environment report to obtain a corresponding first verification result. It is understandable that the remote authentication service can verify the information based on pre-set verification rules. For example, for hardware configuration information, it will be checked whether it matches the preset compatible hardware list to prevent potential security risks caused by incompatible hardware. For software operation information, it will verify whether the software is authorized and whether there are security vulnerabilities or signs of tampering.

[0062] Moreover, in this embodiment, it is necessary to perform integrity verification on the mirror environment based on the target measurement value in the remote authentication service and the local measurement management service to obtain a corresponding second verification result, and determine the corresponding environment verification result based on the first verification result and the second verification result. It can be understood that the target measurement value, as a characteristic identifier of the mirror environment content, is the key basis for judging whether the mirror environment has been maliciously modified. By comparing the actual state of the current mirror environment with the state represented by the target measurement value, the remote authentication service and the measurement management service can detect whether the mirror environment has been subjected to unauthorized modification. Moreover, in this embodiment, it is necessary to combine the first verification result and the second verification result to determine the environment verification result. Only when both verification results indicate that the mirror environment is safe can it be confirmed that the mirror environment meets the security requirements for executing the task.

[0063] In this embodiment, the local authorization service verifies the target user's username, user certificate, and target signature information to complete the corresponding user identity verification operation and obtain a third verification result. The target signature information is the data obtained by the target user signing the target task information. It can be understood that the third verification result is a verification result of the target user's identity and can indicate whether the target user has the authority to execute the task.

[0064] After completing the task execution authority check corresponding to the target user based on the authorization service, if the authority check passes, the target task information is subjected to integrity verification based on the authorization service to obtain the corresponding fourth verification result. It should be noted that the integrity verification is mainly achieved by comparing the hash value of the target task information. During the transmission of the target task information, its hash value should remain unchanged. By calculating the hash value of the currently received target task information and comparing it with the hash value of the target task information at the time of construction, if the two are consistent, it indicates that the target task information has not been tampered with during the transmission process.

[0065] In this embodiment, the authenticity of the authentication authority signature information in the user certificate is verified based on the authorization service and the public key information corresponding to the target user to obtain a corresponding fifth verification result; the authentication authority signature information is typically generated using the target user's private key information. Next, based on the authorization service and the pending resource corresponding to the pending task, the resource access permission and resource operation permission verification are performed on the target user to obtain a corresponding sixth verification result.

[0066] Finally, the corresponding user verification result is determined using the third, fourth, fifth, and sixth verification results. It should be noted that if an anomaly is detected in the environment verification result or the user verification result, such as an unverified identity, insufficient execution permissions, incomplete target task information, incorrect signature information from the authority authentication service, or lack of resource access rights, the authorization service will refuse to execute the pending task and return the relevant error information.

[0067] Step S14: If the environment verification result and the user verification result both indicate that the verification is passed, the task to be processed is scheduled to the mirror environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0068] In this embodiment, the to-be-processed task is submitted to the preset distributed computing framework so that the preset distributed computing framework schedules the to-be-processed task to the mirror environment.

[0069] It is understood that after requesting the task key corresponding to the pending task from the key management service, the key management service again checks the environment verification result corresponding to the mirror environment through the remote authentication service to determine whether the verification has passed, thereby obtaining the corresponding verification result. In this embodiment, since the mirror environment may change due to external attacks or other factors in the short period between requesting the task key and obtaining the task key, this re-verification can further ensure the security of the mirror environment.

[0070] Subsequently, in this embodiment, if the inspection result indicates that the environmental verification result is verified to be passed, the task key corresponding to the pending task is transmitted to the mirror environment, so that the task key is used in the mirror environment to decrypt the target task information, and based on the decrypted information, the corresponding data processing operation is triggered to obtain the task execution result. Furthermore, after the data processing operation is completed, the task execution result is encrypted using the key and stored in each node of the distributed file storage system in the manner of a distributed file storage system.

[0071] As can be seen from the above, in the task initialization phase, this application triggers the creation of a trusted execution environment mirror for the task to be processed, and obtains the mirror environment and target measurement value. Upon receiving the target user certificate request, a user certificate is created based on the authoritative authentication service, and the task key is initialized based on the key management service, and the user uses it to initialize the task information. In the task execution phase, the mirror environment is verified through the remote authentication service, the target measurement value and the first preset mechanism, and the user is verified through the authorization service and the second preset mechanism. If all the verifications pass, the task to be processed is scheduled to the mirror environment, and the task key and target task information obtained by the key management service are used for data processing to obtain the task execution result. In this way, this application can effectively enhance the privacy of data while ensuring data processing efficiency, thereby protecting the security of the data.

[0072] The technical solution of this application is described in detail below in conjunction with specific application scenarios.

[0073] In a specific implementation, for financial data processing scenarios, especially when it involves the processing and analysis of large-scale transaction data, it is necessary to protect sensitive data such as customer financial information or transaction records.

[0074] Specifically, when processing transaction data, financial institutions first ensure the security of their computing environment through a trusted execution environment image build process. During this build process, the code and related information used for transaction data calculations are integrated into the resulting image environment, and a specific metric value (the target metric value) is generated. This metric value is derived by hashing the image environment content and key code, reflecting the characteristics of the image content. Financial institutions can register this metric value with the metric management service. Subsequent use of this image environment can effectively verify its integrity and consistency by comparing it with the metric value in the metric management service, ensuring that the image environment has not been modified or tampered with.

[0075] Task keys play a critical role in training machine learning models related to financial data payments. These keys, provided by the key management service, encrypt transaction data, ensuring data security during storage and transmission. Furthermore, task execution is permitted only after successful remote authentication. During this process, task keys are authenticated and authorized by the remote authorization service to prevent data leaks.

[0076] After data analysis is complete, such as for complaint monitoring or transaction risk assessment, the results are encrypted and stored in a distributed file system. This distributed file system, based on technologies like Hadoop, features data redundancy. Even if a node experiences a problem, data can still be recovered from other nodes, ensuring data durability and availability.

[0077] In another specific embodiment, for medical data processing scenarios, patient data is often extremely sensitive. Whether it is executing the training of machine learning models such as disease prediction algorithms, or processing sensitive data during scientific research, this technical solution can provide a reliable method for processing and protecting medical data.

[0078] Specifically, the mirrored environment plays a core security role in this scenario. Only medical staff holding a certificate (i.e., a user certificate) issued by an authentication authority can access the medical system's analysis services. When applying to the authentication authority, staff must provide their public key and other authentication information. The authentication authority then verifies the user certificate using the private key. When accessing the medical system's analysis services, the authorization service verifies the user's certificate's validity to ensure legal access.

[0079] At the same time, encrypted data provided by the key management service ensures the security of medical records. During data analysis, patient data is decrypted and analyzed only within the image environment. The remote attestation service ensures the integrity of the image environment. It works together with the measurement management service to prevent tampering or malware intrusion. The remote attestation service meticulously verifies the image environment report, including information such as hardware configuration, running software, and security plug-ins. It also verifies the integrity of the image environment in conjunction with metrics from the measurement management service, ensuring the security of the data processing environment.

[0080] After analysis, the authorization service manages the generation and access of diagnosis and treatment results, ensuring that only authorized physicians have access to encrypted medical records. The authorization service performs multiple checks, including verifying the physician's identity, role, and permissions; checking the integrity and signature of the diagnosis and treatment result information (i.e., target task information); and confirming the physician's access rights to relevant resources, comprehensively safeguarding the security and privacy of medical data.

[0081] Therefore, through the application demonstrations of these different scenarios, it can be seen that this application can provide comprehensive and effective protection for data security in different application scenarios in the fields of large-scale data processing, machine learning, deep learning, and generative artificial intelligence. There are complete data security and integrity operation steps in the data transmission, calculation, and storage processes, which fully reflects the convenience and security of the technical solution of this application in various application scenarios.

[0082] Accordingly, see Figure 3 As shown, the embodiment of the present application further provides a privacy enhancement device based on a trusted execution environment, which is applied to a data processing system created based on a preset distributed computing framework, including:

[0083] The image creation module 11 is used to trigger the trusted execution environment image creation operation corresponding to the task to be processed during the task initialization phase to obtain the corresponding image environment and the target measurement value corresponding to the image environment;

[0084] The information acquisition module 12 is configured to, upon receiving a certificate request from a target user, create a user certificate corresponding to the certificate request based on a local authentication authority service, and initialize a task key based on a local key management service, so that the target user can initialize the task information of the task to be processed based on the obtained task key to obtain target task information;

[0085] A verification module 13 is configured to, during the task execution phase, perform an environmental verification on the mirror environment based on a local remote authentication service, the target metric value, and a first preset multi-level authentication mechanism, and to verify the target user based on a local authorization service and a second preset multi-level authentication mechanism, to obtain an environmental verification result and a user verification result;

[0086] The task execution module 14 is used to schedule the task to be processed to the mirror environment if the environment verification result and the user verification result both indicate that the verification is passed, and obtain the task key corresponding to the task to be processed based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

[0087] As can be seen from the above, in the task initialization phase, this application triggers the creation of a trusted execution environment mirror for the task to be processed, and obtains the mirror environment and target measurement value. Upon receiving the target user certificate request, a user certificate is created based on the authoritative authentication service, and the task key is initialized based on the key management service, and the user uses it to initialize the task information. In the task execution phase, the mirror environment is verified through the remote authentication service, the target measurement value and the first preset mechanism, and the user is verified through the authorization service and the second preset mechanism. If all the verifications pass, the task to be processed is scheduled to the mirror environment, and the task key and target task information obtained by the key management service are used for data processing to obtain the task execution result. In this way, this application can effectively enhance the privacy of data while ensuring data processing efficiency, thereby protecting the security of the data.

[0088] In some specific implementations, the image creation module 11 may specifically include:

[0089] The measurement value acquisition unit is used to perform a hash operation based on the content of the obtained mirror environment during the execution of the trusted execution environment image creation operation to obtain a target measurement value corresponding to the mirror environment, so that the target user can register the target measurement value to the local measurement management service.

[0090] In some specific implementations, the information acquisition module 12 may specifically include:

[0091] A first information acquisition unit is configured to, upon receiving a certificate request sent by a target user, acquire, based on a local authority authentication service, public key information and first identity information corresponding to the target user in the certificate request;

[0092] An information judgment unit, configured to judge whether both the public key information and the first identity information satisfy preset conditions, so as to obtain a corresponding judgment result;

[0093] The certificate creation unit is configured to, if the judgment result indicates that all conditions are met, sign the public key information and the first identity information using the private key information corresponding to the authoritative authentication service to obtain a user certificate corresponding to the certificate request.

[0094] In some specific implementations, the information acquisition module 12 may specifically include:

[0095] an account creation unit, configured to create a target account corresponding to the target user based on a local key management service and using the second identity information of the target user;

[0096] The second information acquisition unit is used to create a root key based on the target account, and use the root key to encrypt the initial task key created by the target user and write it to the disk, so that the target user can encrypt the task information of the task to be processed based on the encrypted task key, and determine the task code information corresponding to the task information to obtain the target task information.

[0097] In some specific embodiments, the preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base constructed based on a preset container orchestration platform, and a distributed computing underlying framework constructed based on a preset computing cluster system and a preset batch and streaming data processing platform; wherein, the distributed computing base includes containers for respectively storing applications corresponding to the authoritative authentication service, the key management service, the remote authentication service, the measurement management service, and the authorization service.

[0098] In some specific implementations, the verification module 13 may specifically include:

[0099] A first verification unit is configured to verify the hardware configuration information, software running information, and security plug-in information in the report of the mirror environment based on a local remote authentication service to obtain a corresponding first verification result;

[0100] A second verification unit is configured to perform an integrity verification on the mirror environment based on the target metric value in the remote authentication service and the local metric management service to obtain a corresponding second verification result, and determine a corresponding environment verification result based on the first verification result and the second verification result;

[0101] a third verification unit, configured to verify the user name corresponding to the target user, the user certificate, and the target signature information based on a local authorization service to complete a corresponding user identity verification operation and obtain a third verification result; wherein the target signature information is data obtained by the target user signing the target task information;

[0102] a fourth verification unit configured to, after completing a task execution authority check corresponding to the target user based on the authorization service, perform an integrity check on the target task information based on the authorization service if the authority check passes, to obtain a corresponding fourth verification result;

[0103] a fifth verification unit, configured to perform authenticity verification on the signature information of the authentication authority in the user certificate based on the authorization service and the public key information corresponding to the target user, so as to obtain a corresponding fifth verification result;

[0104] a sixth verification unit, configured to perform resource access permission verification and resource operation permission verification on the target user based on the authorization service and the to-be-processed resource corresponding to the to-be-processed task, to obtain a corresponding sixth verification result;

[0105] A result determination unit is configured to determine a corresponding user verification result using the third verification result, the fourth verification result, the fifth verification result, and the sixth verification result.

[0106] In some specific implementations, the task execution module 14 may specifically include:

[0107] A task scheduling unit, configured to submit the pending task to the preset distributed computing framework so that the preset distributed computing framework schedules the pending task to the mirror environment;

[0108] A result acquisition unit is configured to, after requesting the task key corresponding to the to-be-processed task from the key management service, check again through the remote authentication service whether the environment verification result corresponding to the mirror environment passes verification based on the key management service, so as to obtain a corresponding verification result;

[0109] A data processing unit is configured to transmit the task key corresponding to the task to be processed to the mirror environment if the inspection result indicates that the environment verification result is passed, so as to decrypt the target task information using the task key in the mirror environment, trigger corresponding data processing operations based on the decrypted information obtained, and obtain the task execution result.

[0110] Furthermore, the embodiment of the present application also discloses an electronic device, Figure 4This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram cannot be considered as any limitation on the scope of use of this application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the privacy enhancement method based on a trusted execution environment disclosed in any of the aforementioned embodiments. In addition, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0111] In this embodiment, the power supply 23 is used to provide operating voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device. The communication protocol it follows is any communication protocol that can be applied to the technical solution of this application and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world. Its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0112] In addition, the memory 22 as a carrier for resource storage can be a read-only memory, random access memory, disk or optical disk, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0113] The operating system 221 is used to manage and control the hardware devices and computer program 222 on the electronic device 20, and can be Windows Server, Netware, Unix, Linux, etc. In addition to including computer programs that can be used to implement the privacy enhancement method based on the trusted execution environment disclosed in any of the aforementioned embodiments and executed by the electronic device 20, the computer program 222 can further include computer programs that can be used to perform other specific tasks.

[0114] Furthermore, this application discloses a computer-readable storage medium for storing a computer program; wherein, when executed by a processor, the computer program implements the aforementioned privacy-enhancing method based on a trusted execution environment. The specific steps of this method can be referred to the corresponding content disclosed in the aforementioned embodiments and will not be repeated here.

[0115] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from the other embodiments. Reference can be made to the descriptions of the identical or similar parts between the various embodiments. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and the relevant parts can be referred to the descriptions of the methods.

[0116] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0117] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0118] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or device comprising the element.

[0119] The above is a detailed introduction to the technical solution provided by the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for those skilled in the art, according to the ideas of the present application, there may be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A privacy enhancement method based on a trusted execution environment, characterized in that: Applicable to data processing systems created based on a pre-defined distributed computing framework, including: In the task initialization phase, triggering the trusted execution environment image creation operation corresponding to the task to be processed to obtain the corresponding image environment and the target measurement value corresponding to the image environment; When receiving a certificate request from a target user, a user certificate corresponding to the certificate request is created based on a local authentication authority service, and a task key is initialized based on a local key management service, so that the target user initializes the task information of the task to be processed based on the obtained task key to obtain the target task information; During the task execution phase, the mirror environment is verified based on the local remote authentication service, the target metric value, and the first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and the second preset multi-level authentication mechanism to obtain an environment verification result and a user verification result; If both the environment verification result and the user verification result indicate that the verification is passed, the task to be processed is scheduled to the mirror environment, and the task key corresponding to the task to be processed is obtained based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

2. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that The triggering of the trusted execution environment image creation operation corresponding to the task to be processed to obtain the corresponding image environment and the target metric value corresponding to the image environment includes: During the trusted execution environment image creation operation, a hash operation is performed based on the content of the obtained image environment to obtain a target metric value corresponding to the image environment, so that the target user can register the target metric value to the local metric management service.

3. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that When receiving a certificate request sent by a target user, creating a user certificate corresponding to the certificate request based on a local authority authentication service includes: When receiving a certificate request sent by a target user, obtaining the public key information and first identity information corresponding to the target user in the certificate request based on a local authoritative authentication service; Determining whether the public key information and the first identity information both meet preset conditions to obtain a corresponding determination result; If the judgment result indicates that both conditions are satisfied, the public key information and the first identity information are signed using the private key information corresponding to the authoritative authentication service to obtain a user certificate corresponding to the certificate request.

4. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that The local key management service performs task key initialization so that the target user initializes the task information of the pending task based on the obtained task key to obtain target task information, including: Creating a target account corresponding to the target user based on a local key management service and using the second identity information of the target user; A root key is created based on the target account, and the root key is used to encrypt the initial task key created by the target user and save it to disk, so that the target user can encrypt the task information of the task to be processed based on the encrypted task key, and determine the task code information corresponding to the task information to obtain the target task information.

5. The privacy enhancement method based on a trusted execution environment according to claim 2, characterized in that: The preset distributed computing framework includes a corresponding distributed file storage system, a distributed computing base built based on a preset container orchestration platform, and a distributed computing underlying framework built based on a preset computing cluster system and a preset batch processing and streaming data processing platform; wherein, the distributed computing base includes containers for respectively storing applications corresponding to the authoritative authentication service, the key management service, the remote authentication service, the measurement management service, and the authorization service.

6. The privacy enhancement method based on a trusted execution environment according to claim 1, characterized in that The mirror environment is verified based on the local remote authentication service, the target metric value, and a first preset multi-level authentication mechanism, and the target user is verified based on the local authorization service and a second preset multi-level authentication mechanism to obtain an environment verification result and a user verification result, including: Verifying the hardware configuration information, software running information, and security plug-in information in the report of the mirror environment based on a local remote authentication service to obtain a corresponding first verification result; Performing an integrity check on the mirror environment based on the target metric value in the remote authentication service and the local metric management service to obtain a corresponding second verification result, and determining a corresponding environment verification result based on the first verification result and the second verification result; Verifying the user name, user certificate, and target signature information corresponding to the target user based on a local authorization service to complete a corresponding user identity verification operation and obtain a third verification result; wherein the target signature information is data obtained by the target user signing the target task information; After completing the task execution authority check corresponding to the target user based on the authorization service, if the authority check passes, performing an integrity check on the target task information based on the authorization service to obtain a corresponding fourth verification result; Performing authenticity verification on the signature information of the authentication authority in the user certificate based on the authorization service and the public key information corresponding to the target user to obtain a corresponding fifth verification result; Based on the authorization service and the to-be-processed resource corresponding to the to-be-processed task, performing resource access permission verification and resource operation permission verification on the target user to obtain a corresponding sixth verification result; A corresponding user verification result is determined using the third verification result, the fourth verification result, the fifth verification result, and the sixth verification result.

7. The privacy enhancement method based on a trusted execution environment according to any one of claims 1 to 6, characterized in that: The step of scheduling the pending task to the mirror environment and obtaining the task key corresponding to the pending task based on the key management service, triggering a corresponding data processing operation using the task key and the target task information, and obtaining a task execution result includes: Submitting the pending task to the preset distributed computing framework so that the preset distributed computing framework schedules the pending task to the mirror environment; After requesting the task key corresponding to the to-be-processed task from the key management service, checking again through the remote authentication service based on the key management service whether the environment verification result corresponding to the mirror environment passes verification, so as to obtain a corresponding verification result; If the inspection result indicates that the environment verification result is passed, the task key corresponding to the task to be processed will be transmitted to the mirror environment, so that the target task information can be decrypted using the task key in the mirror environment, and the corresponding data processing operation can be triggered based on the decrypted information, and the task execution result can be obtained.

8. A privacy enhancement device based on a trusted execution environment, characterized in that: Applicable to data processing systems created based on a pre-defined distributed computing framework, including: An image creation module is used to trigger the trusted execution environment image creation operation corresponding to the task to be processed during the task initialization phase to obtain the corresponding image environment and the target measurement value corresponding to the image environment; an information acquisition module configured to, upon receiving a certificate request from a target user, create a user certificate corresponding to the certificate request based on a local authentication authority service, and initialize a task key based on a local key management service, so that the target user can initialize the task information of the task to be processed based on the obtained task key to obtain target task information; A verification module is used to perform an environmental verification on the mirror environment based on a local remote authentication service, the target metric value, and a first preset multi-level authentication mechanism during the task execution phase, and to verify the target user based on a local authorization service and a second preset multi-level authentication mechanism to obtain an environmental verification result and a user verification result; A task execution module is used to schedule the task to be processed to the mirror environment if the environment verification result and the user verification result both indicate that the verification is passed, and obtain the task key corresponding to the task to be processed based on the key management service, so as to use the task key and the target task information to trigger the corresponding data processing operation and obtain the task execution result.

9. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor, configured to execute the computer program to implement the privacy enhancement method based on a trusted execution environment as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that Used to store a computer program; wherein, when the computer program is executed by a processor, the privacy enhancement method based on a trusted execution environment as described in any one of claims 1 to 7 is implemented.

Images