Trust transfer method, apparatus and device for embedded system, and medium

Abstract

The embodiment of the invention discloses a trust transfer method and device for an embedded system, equipment and a medium. The method comprises the following steps: constructing an embedded system based on system information of a to-be-constructed system; performing communication security technology research on the embedded system based on the network connection state of the embedded system to obtain a communication security technology research result; establishing a reliable communication channel of the embedded system based on the research result of the communication security technology; integrating the hardware security module, the trusted execution environment and the multi-stage bootstrap program through the trusted communication channel to obtain a security startup framework of the embedded system; and determining a safe starting scheme of the embedded system based on a preset safe starting mode and the safe starting framework. Through the technical scheme of the embodiment of the invention, communication channels can be individually established and safe starting schemes can be determined for different embedded systems, so that the safety of the embedded systems is improved.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of computer technology, and in particular to a trust transfer method, device, equipment and medium for an embedded system. Background Art

[0002] With the development of information technology, embedded systems are widely used to perform predefined tasks with specific requirements. Since embedded systems are special computer systems designed for specific applications and can only be used for a special task, embedded systems are usually used for mass production to achieve the effect of reducing costs and increasing efficiency.

[0003] At present, in actual application, existing embedded systems cannot ensure the confidentiality, integrity and availability of data exchange between devices. There are also security threats such as data leakage, tampering and man-in-the-middle attacks, which reduce the security of embedded systems. Summary of the invention

[0004] The embodiment of the present invention provides a trust transfer method, device, equipment and medium for an embedded system, so as to establish a communication channel and determine a secure startup scheme for different embedded systems in a personalized manner, thereby improving the security of the embedded system.

[0005] In a first aspect, an embodiment of the present invention provides a trust transfer method for an embedded system, comprising:

[0006] Build an embedded system based on the system information of the system to be built;

[0007] Conducting communication security technology research on the embedded system based on the network connection status of the embedded system to obtain communication security technology research results;

[0008] Establishing a trusted communication channel for the embedded system based on the communication security technology research results;

[0009] Integrate the hardware security module, the trusted execution environment and the multi-level boot program through the trusted communication channel to obtain a secure boot framework of the embedded system;

[0010] Based on the preset secure boot mode and the secure boot framework, a secure boot scheme for the embedded system is determined.

[0011] Optionally, the method further includes: if the network connection status of the embedded system is network not accessed, continuing the network access operation; if the network connection status of the embedded system is network accessed, conducting communication security technology research on the embedded system to obtain communication security technology research results.

[0012] Optionally, the method also includes: authenticating the embedded system based on the communication security technology research results to obtain an authentication result; authorizing access to the embedded system and signing an agreement based on the authentication result to obtain a secure communication protocol; establishing a channel for the embedded system based on the secure communication protocol to obtain a trusted communication channel for the embedded system.

[0013] Optionally, the method further includes: performing algorithm encryption and key management on the embedded system based on the communication security technology research results to obtain a key management strategy.

[0014] Optionally, the method further includes: the preset safe startup mode is determined based on a study of a preset subtask.

[0015] Optionally, the method also includes: the preset secure boot mode includes: hardware rooted trust model, multi-level verification algorithm, dynamic key management mechanism, trusted execution environment isolation technology, device identity binding technology, and secure boot log and remote attestation.

[0016] In a second aspect, an embodiment of the present invention further provides a trust transfer device for an embedded system, the device comprising:

[0017] An embedded system building module, used for building an embedded system based on system information of a system to be built;

[0018] A communication security technology research result determination module is used to perform a communication security technology research on the embedded system based on the network connection status of the embedded system to obtain a communication security technology research result;

[0019] A trusted communication channel establishment module, used to establish a trusted communication channel of the embedded system based on the communication security technology research results;

[0020] A secure boot framework determination module, used to integrate the hardware security module, the trusted execution environment and the multi-stage boot program through the trusted communication channel to obtain a secure boot framework for the embedded system;

[0021] The secure boot scheme determination module is used to determine the secure boot scheme of the embedded system based on a preset secure boot mode and the secure boot framework.

[0022] In a third aspect, an embodiment of the present invention further provides an electronic device, the electronic device comprising:

[0023] one or more processors;

[0024] A memory for storing one or more programs;

[0025] When the one or more programs are executed by the one or more processors, the one or more processors implement the trust transfer method for an embedded system provided by any embodiment of the present invention.

[0026] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements a trust transfer method for an embedded system as provided in any embodiment of the present invention.

[0027] In a fifth aspect, an embodiment of the present invention provides a computer program product, including a computer program, which, when executed by a processor, implements the trust transfer method for an embedded system provided by any embodiment of the present invention.

[0028] The technical solution of the embodiment of the present invention is to build an embedded system based on the system information of the system to be built; conduct communication security technology research on the embedded system based on the network connection status of the embedded system to obtain communication security technology research results; establish a trusted communication channel for the embedded system based on the communication security technology research results, thereby avoiding data leakage, tampering and man-in-the-middle attacks during the communication process, and improving communication security; integrate the hardware security module, the trusted execution environment and the multi-level boot program through the trusted communication channel to obtain a secure boot framework for the embedded system; determine the secure boot scheme of the embedded system based on a preset secure boot mode and the secure boot framework, so that the secure boot scheme can be personalized for different embedded systems to ensure the confidentiality, integrity and availability of data exchange between devices, thereby improving the security of the embedded system.

[0029] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0031] Figure 1 is a flow chart of a trust transfer method for an embedded system provided in Embodiment 1 of the present invention;

[0032] Figure 2 It is a structural schematic diagram of a trust transfer device for an embedded system provided in Embodiment 2 of the present invention;

[0033] Figure 3 It is a structural schematic diagram of an electronic device for implementing the trust transfer method of an embedded system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0034] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0035] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0036] Embodiment 1

[0037] Figure 1 A flowchart of a trust transfer method for an embedded system is provided for the first embodiment of the present invention. This embodiment is applicable to the case of establishing a trusted communication channel for an embedded system and determining a secure boot scheme. The method can be executed by a trust transfer device for an embedded system. The trust transfer device for an embedded system can be implemented in the form of hardware and / or software. The trust transfer device for an embedded system can be configured in an electronic device. Figure 1 As shown, the method includes:

[0038] S110: construct an embedded system based on the system information of the system to be constructed.

[0039] Among them, system information may refer to information based on which an embedded system is built. An embedded system may refer to a special-purpose computer system that is completely embedded inside a controlled device and designed for a specific application. An embedded system can be used to control, monitor or assist equipment, machines or equipment used for factory operations. Unlike general-purpose computer systems such as personal computers, embedded systems usually perform predefined tasks with specific requirements. Since embedded systems are only targeted at one specific task, designers can optimize it, reduce size and reduce costs. Embedded systems are usually mass-produced, so the cost savings of a single one can be amplified by hundreds or thousands with production. In an embodiment of the present invention, the embedded system may be a Dianhong system. The Dianhong system aims to provide a unified architecture for the intelligence, interconnection and collaboration of different devices, realize plug-and-play of devices and interconnection of massive data, thereby improving the quality and efficiency of power services and giving birth to a new energy ecology. It plays an important role.

[0040] Specifically, the system information of the system to be built is obtained through the cloud server, and a secure embedded system is built based on the system information of the system to be built.

[0041] S120. Conduct communication security technology research on the embedded system based on the network connection status of the embedded system to obtain communication security technology research results.

[0042] The network connection status may refer to whether the embedded system is connected to the network. The communication security technology research may refer to a specific research based on the communication security technology. The communication security technology research result may refer to whether the result of the communication security technology research is completed.

[0043] Specifically, a secure embedded system will be built for network access, and when the network access is completed, communication security technology research will be conducted on the embedded system to obtain communication security technology research results.

[0044] It should be noted that on the basis of building the security foundation of the telecom system, the research on network access and communication security technology aims to ensure the confidentiality, integrity and availability of data exchange between devices.

[0045] On the basis of the above technical scheme, "conducting communication security technology research on the embedded system based on the network connection status of the embedded system to obtain communication security technology research results" may include: if the network connection status of the embedded system is that the network is not connected, then continue the network access operation; if the network connection status of the embedded system is that the network is connected, then conduct communication security technology research on the embedded system to obtain communication security technology research results.

[0046] Specifically, if the network connection state of the embedded system is that the network is not connected, the network access operation is continued until the network access is completed. If the network connection state of the embedded system is that the network access is completed, the communication security technology research is performed on the embedded system to obtain the communication security technology research results.

[0047] S130. Establish a trusted communication channel for embedded systems based on the research results of communication security technology.

[0048] Among them, a trusted communication channel may refer to a communication channel that can avoid data leakage, tampering and man-in-the-middle attacks during the communication process.

[0049] Specifically, if the communication security technology research result is that the research is not completed, the communication security technology research is continued until the research is completed. If the communication security technology research result is that the research is completed, a trusted communication channel of the embedded system can be established based on the secure tunnel management technology.

[0050] On the basis of the above technical solutions, "establishing a trusted communication channel for embedded systems based on the research results of communication security technology" may include: authenticating the embedded system based on the research results of communication security technology to obtain an authentication result; authorizing access to the embedded system and signing an agreement based on the authentication result to obtain a secure communication protocol; establishing a channel for the embedded system based on the secure communication protocol to obtain a trusted communication channel for the embedded system.

[0051] The identity authentication result may refer to the result of whether the identity authentication is completed. The secure communication protocol may refer to a secure communication protocol for embedded systems.

[0052] Specifically, based on the research results of communication security technology, the embedded system is authenticated to obtain the authentication result. If the authentication result is completed, the access is authorized. After the authorized access is completed, a secure communication protocol can be signed. Based on the secure communication protocol and secure tunnel management technology, a channel is established for the embedded system to obtain a trusted communication channel for the embedded system.

[0053] On the basis of the above technical solution, the method also includes: performing algorithm encryption and key management on the embedded system based on the research results of communication security technology to obtain a key management strategy.

[0054] Specifically, while establishing a trusted communication channel, such as after signing a secure communication protocol, lightweight encryption algorithms and key management can be performed to obtain a key management strategy.

[0055] S140, integrating the hardware security module, the trusted execution environment and the multi-level boot program through a trusted communication channel to obtain a secure boot framework for the embedded system.

[0056] Among them, hardware security module (HSM) may refer to a computer hardware device used to protect and manage keys used by strong authentication systems and provide related cryptographic operations. Trusted Execution Environment (TEE) may refer to an advanced hardware security technology that provides an independent and secure space for the execution of sensitive tasks and the processing of critical data by creating a hardware-level security isolation area in a computing device. A boot loader is a program located on a computer or other computer application that is used to boot the operating system. A boot loader may refer to a computer program whose main function is to load the operating system kernel into memory when the computer starts and start the operating system. The boot loader may be located on the computer's boot storage device, such as the master boot record (MBR) of a hard disk or the boot sector of a removable medium such as a USB flash drive.

[0057] Specifically, by integrating hardware security modules, trusted execution environments and multi-level boot programs through trusted communication channels, a comprehensive secure boot framework is constructed, thereby enhancing the system's ability to resist tampering and malicious attacks, and promoting the innovative application and standardization of secure boot technology in various devices such as Dianhong devices.

[0058] S150: Determine a secure boot solution for the embedded system based on a preset secure boot mode and secure boot framework.

[0059] The preset secure boot mode may refer to a preset secure boot mode when the embedded system is started and when the application is started. For example, the secure boot framework can cooperate with the preset secure boot mode to achieve high security and reliability of the device, and support firmware integrity verification, key management and device identity authentication.

[0060] Specifically, a secure boot framework is used to determine a trust transfer scheme according to a preset secure boot method to obtain a secure boot scheme for the embedded system.

[0061] On the basis of the above technical solution, the preset safe startup mode is determined based on the research of pre-set subtasks.

[0062] Among them, sub-task research is carried out, namely studying the design and implementation of hardware security modules (HSM), optimizing the secure boot process, developing a firmware integrity verification mechanism, and designing a key management solution in the boot phase.

[0063] Specifically, the subtask research contents include: hardware security module design and implementation, secure boot process design and optimization, firmware integrity verification mechanism research, and key management scheme design during the boot phase; application of trusted execution environment in the boot process, anti-tampering technology research during the boot process, secure boot logging and audit mechanism design, application of hardware binding technology in secure boot, encryption algorithm selection and implementation during the boot process, and emergency response mechanism design after secure boot failure; research on device identity authentication technology during the boot phase, secure time source design during the boot process, secure configuration management during the boot process, research on device integrity measurement technology during the boot phase, and secure boot and cloud verification mechanism design; research on security isolation technology during the boot process, malware detection technology during the boot phase, research on secure boot performance optimization strategy, and design of anomaly detection and response mechanism during the boot process.

[0064] It should be noted that the security isolation technology uses network isolation technology, the purpose of which is to ensure that harmful attacks are isolated. The secure exchange of data between networks is completed outside the trusted network and under the premise of ensuring that the information inside the trusted network is not leaked. Common forms of network isolation include physical isolation, protocol isolation and VPNQ isolation. The focus of network isolation is physical isolation. Physical isolation can ensure that the internal network and the external network are never connected. At most, there is only one data connection with the same isolated device at the same time. Through VLAN isolation technology, many network devices in the network system can be divided into several virtual workgroups. The network devices between the combined groups are isolated from each other at the second layer to form different broadcast domains, and the broadcast traffic is limited to different broadcast domains. Since VLAN technology is based on the isolation between the second layer and the third layer, different network users and resources can be grouped and the data exchange between network devices in different groups can be isolated through switches that support VLAN technology to achieve the purpose of network security. Users in the same VLAN can communicate with each other, while users in different VLANs are disconnected at the data link layer and can only be accessed through a third-layer router. For each data exchange, physical isolation goes through two processes: data writing and data reading. The intranet and the extranet (or the intranet and the private network) are never connected. At the same time, at most one non-TCP / IP protocol data connection can be established between the intranet and the extranet (or the intranet and the private network) and the physically isolated device.

[0065] Based on the above technical solutions, the preset secure boot methods include: hardware-rooted trust model, multi-level verification algorithm, dynamic key management mechanism, trusted execution environment isolation technology, device identity binding technology, and secure boot log and remote attestation.

[0066] Among them, the hardware-rooted trust model: using the hardware security module as the root of trust, building a trust chain from hardware to software to ensure the integrity and authenticity of each startup stage. Multi-level verification algorithm: designing a multi-level verification algorithm based on hash chain and digital signature to achieve step-by-step integrity verification from the boot program to the operating system kernel to prevent illegal modifications at any stage. Dynamic key management mechanism: using hardware-based key derivation function (KDF) and secure storage technology to achieve dynamic key generation, rotation and protection during the startup process, and enhance the security and diversity of keys. Trusted execution environment isolation technology: using hardware isolation technologies such as ARM TrustZone to build an isolated environment for the secure world and the ordinary world to protect key security operations and sensitive data. Device identity binding technology: combining the physical unclonable function (PUF) and the device unique identifier (UUID) to achieve unique identity authentication of the device and prevent cloning and counterfeiting attacks. Secure boot log and remote attestation: designing a distributed logging system based on blockchain technology, cooperating with the remote attestation protocol to achieve the auditability of the startup process and remote verification of device integrity.

[0067] It should be noted that the technical solution of the present invention needs to be analyzed for the feasibility and advancement of the research method (technical route) when it is implemented, so as to conclude that the method combines mature hardware security technology with cutting-edge cryptographic algorithms. By designing a multi-level security verification mechanism and a dynamic key management strategy, full-link protection from hardware to software is achieved, solving the security vulnerability problem in the traditional startup process. By utilizing a trusted execution environment and hardware isolation technology, the protection capabilities of key operations and sensitive data are enhanced to meet the needs of high-security level equipment. Combined with device identity binding and remote attestation technology, the system's ability to resist advanced persistent threats (APTs) is enhanced, accelerating the standardization and industrialization process of Dianhong's equipment security startup technology.

[0068] The technical solution of the embodiment of the present invention builds an embedded system based on the system information of the system to be built; conducts communication security technology research on the embedded system based on the network connection status of the embedded system to obtain communication security technology research results; establishes a trusted communication channel for the embedded system based on the communication security technology research results, thereby avoiding data leakage, tampering and man-in-the-middle attacks during the communication process, and improving communication security; integrates the hardware security module, the trusted execution environment and the multi-level boot program through the trusted communication channel to obtain a secure boot framework for the embedded system; determines the secure boot scheme of the embedded system based on the preset secure boot mode and the secure boot framework, so that the secure boot scheme can be personalized for different embedded systems to ensure the confidentiality, integrity and availability of data exchange between devices, thereby improving the security of the embedded system.

[0069] It should be noted that, taking the Dianhong system as an example, the technical solution of the embodiment of the present invention can realize the trust transfer from hardware to software of the embedded system. A secure Dianhong system is built through a cloud server to access the network, and then the communication security technology is studied. After the communication security technology research is completed, identity authentication is performed. After the authentication is completed, access authorization is immediately performed, and a secure communication protocol can be signed. Then a lightweight encryption algorithm is performed, and key management is performed at the same time. The secure tunnel management technology is used to establish a communication channel. After establishing a trusted communication channel, the hardware security module (HSM), the trusted execution environment (TEE) and the multi-level boot program are integrated, and then a comprehensive secure boot framework is built to achieve high security and reliability of the device, support firmware integrity verification, key management and device identity authentication, and finally conduct subtask research, and then study the design and implementation of the hardware security module (HSM), optimize the secure boot process, develop a firmware integrity verification mechanism, and design a key management solution for the boot phase.

[0070] The following is an embodiment of a trust transfer device for an embedded system provided by an embodiment of the present invention. The device and the trust transfer method for an embedded system in the above-mentioned embodiments belong to the same inventive concept. For details not described in detail in the embodiment of the trust transfer device for an embedded system, reference can be made to the embodiment of the trust transfer method for an embedded system in the above-mentioned embodiments.

[0071] Embodiment 2

[0072] Figure 2 This is a schematic diagram of the structure of a trust transfer device for an embedded system provided by Embodiment 2 of the present invention. Figure 2 As shown, the device includes: an embedded system building module 210, a communication security technology research result determination module 220, a trusted communication channel establishment module 230, a secure boot framework determination module 240 and a secure boot scheme determination module 250.

[0073] Among them, the embedded system construction module 210 is used to build an embedded system based on the system information of the system to be built; the communication security technology research result determination module 220 is used to conduct communication security technology research on the embedded system based on the network connection status of the embedded system to obtain the communication security technology research results; the trusted communication channel establishment module 230 is used to establish a trusted communication channel for the embedded system based on the communication security technology research results; the secure boot framework determination module 240 is used to integrate the hardware security module, the trusted execution environment and the multi-level boot program through the trusted communication channel to obtain the secure boot framework of the embedded system; the secure boot scheme determination module 250 is used to determine the secure boot scheme of the embedded system based on the preset secure boot method and the secure boot framework.

[0074] The technical solution of the embodiment of the present invention builds an embedded system based on the system information of the system to be built; conducts communication security technology research on the embedded system based on the network connection status of the embedded system to obtain communication security technology research results; establishes a trusted communication channel for the embedded system based on the communication security technology research results, thereby avoiding data leakage, tampering and man-in-the-middle attacks during the communication process, and improving communication security; integrates the hardware security module, the trusted execution environment and the multi-level boot program through the trusted communication channel to obtain a secure boot framework for the embedded system; determines the secure boot scheme of the embedded system based on the preset secure boot mode and the secure boot framework, so that the secure boot scheme can be personalized for different embedded systems to ensure the confidentiality, integrity and availability of data exchange between devices, thereby improving the security of the embedded system.

[0075] Based on the above technical solution, the communication security technology research result determination module 220 is specifically used for: if the network connection status of the embedded system is that the network is not connected, then continue the network access operation; if the network connection status of the embedded system is that the network is connected, then conduct communication security technology research on the embedded system to obtain the communication security technology research results.

[0076] On the basis of the above technical solution, the trusted communication channel establishment module 230 is specifically used for: authenticating the embedded system based on the research results of communication security technology to obtain the authentication result; authorizing access to the embedded system and signing the agreement based on the authentication result to obtain a secure communication protocol; establishing a channel for the embedded system based on the secure communication protocol to obtain a trusted communication channel for the embedded system.

[0077] On the basis of the above technical solution, the device also includes:

[0078] The key management strategy determination module is used to perform algorithm encryption and key management on the embedded system based on the research results of communication security technology to obtain the key management strategy.

[0079] On the basis of the above technical solution, the preset safe startup mode is determined based on the research of pre-set subtasks.

[0080] Based on the above technical solutions, the preset secure boot methods include: hardware-rooted trust model, multi-level verification algorithm, dynamic key management mechanism, trusted execution environment isolation technology, device identity binding technology, and secure boot log and remote attestation.

[0081] The trust transfer device for an embedded system provided in an embodiment of the present invention can execute the trust transfer method for an embedded system provided in any embodiment of the present invention, and has functional modules and beneficial effects corresponding to executing the trust transfer method for an embedded system.

[0082] It is worth noting that in the above-mentioned embodiment of the trust transfer of the embedded system, the various units and modules included are only divided according to the functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be realized; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0083] Embodiment 3

[0084] Figure 3 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0085] like Figure 3 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0086] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0087] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the trust transfer method of the embedded system.

[0088] In some embodiments, the trust transfer method for an embedded system may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the trust transfer method for an embedded system described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the trust transfer method for an embedded system in any other appropriate manner (e.g., by means of firmware).

[0089] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0090] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0091] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0092] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0093] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0094] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0095] An embodiment of the present invention further provides a computer program product, including a computer program, which, when executed by a processor, implements the trust transfer method for an embedded system provided in any embodiment of the present application.

[0096] In the process of implementation, the computer program product can be written in one or more programming languages ​​or a combination thereof to perform the computer program code of the present invention, and the programming language includes an object-oriented programming language, such as Java, Smalltalk, C++, and also includes a conventional procedural programming language, such as "C" language or similar programming language. The program code can be executed completely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer, partially on the remote computer, or completely on the remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computer (for example, using an Internet service provider to connect through the Internet). The trust transfer method of the embedded system disclosed in the program product and the embodiments of the present application belongs to the same inventive concept, so it is not repeated here.

[0097] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0098] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A trust transfer method for an embedded system, characterized in that: include: Build an embedded system based on the system information of the system to be built; Conducting communication security technology research on the embedded system based on the network connection status of the embedded system to obtain communication security technology research results; Establishing a trusted communication channel for the embedded system based on the communication security technology research results; Integrate the hardware security module, the trusted execution environment and the multi-level boot program through the trusted communication channel to obtain a secure boot framework of the embedded system; Based on the preset secure boot mode and the secure boot framework, a secure boot scheme for the embedded system is determined.

2. The method according to claim 1, characterized in that The communication security technology research is performed on the embedded system based on the network connection status of the embedded system to obtain the communication security technology research results, including: If the network connection status of the embedded system is that the network is not connected, continue to perform the network access operation; If the network connection state of the embedded system is network access, a communication security technology study is performed on the embedded system to obtain a communication security technology study result.

3. The method according to claim 1, characterized in that The establishing of a trusted communication channel of the embedded system based on the communication security technology research results includes: Performing identity authentication on the embedded system based on the communication security technology research results to obtain an identity authentication result; Based on the identity authentication result, the embedded system is authorized to access and the protocol is signed to obtain a secure communication protocol; A channel is established for the embedded system based on the secure communication protocol to obtain a trusted communication channel for the embedded system.

4. The method according to claim 1, characterized in that The method further comprises: Based on the research results of the communication security technology, algorithm encryption and key management are performed on the embedded system to obtain a key management strategy.

5. The method according to claim 1, characterized in that The preset safe startup mode is determined based on the research of the preset subtasks.

6. The method according to claim 1, characterized in that The preset secure boot method includes: hardware-rooted trust model, multi-level verification algorithm, dynamic key management mechanism, trusted execution environment isolation technology, device identity binding technology, and secure boot log and remote attestation.

7. A trust transfer device for an embedded system, characterized in that: The device comprises: An embedded system building module, used for building an embedded system based on system information of a system to be built; A communication security technology research result determination module is used to perform a communication security technology research on the embedded system based on the network connection status of the embedded system to obtain a communication security technology research result; A trusted communication channel establishment module, used to establish a trusted communication channel of the embedded system based on the communication security technology research results; A secure boot framework determination module, used to integrate the hardware security module, the trusted execution environment and the multi-stage boot program through the trusted communication channel to obtain a secure boot framework for the embedded system; The secure boot scheme determination module is used to determine the secure boot scheme of the embedded system based on a preset secure boot mode and the secure boot framework.

8. An electronic device, characterized in that: The electronic device comprises: one or more processors; A memory for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the trust transfer method for an embedded system as described in any one of claims 1-6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the trust transfer method for an embedded system as described in any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the computer program implements the trust transfer method for an embedded system as described in any one of claims 1 to 6.

Images