A privacy measurement and control method and system based on trusted execution environment

Abstract

The present invention discloses a privacy measurement and control method and system based on a trusted execution environment (TEE). The method includes: sending evaluation management software M to the evaluated party; deploying and starting a confidential computing remote authentication service (RS); obtaining trusted execution environment (TEE) measurement values; RS initiating a remote authentication process; in response to valid authentication, establishing a trusted connection with M and allocating a secret key E and a signature private key S to M; sending an evaluation instruction to M and receiving E(I) and S(E(I)) returned by M; in response to S(E(I)) being valid, decrypting E(I) to obtain plaintext test information; and in response to passing the test, recording the software information of the evaluated software C and distributing an evaluation certificate. This solution proposes conducting evaluation within the scope of the evaluated party, which can greatly reduce the deployment costs of the evaluator. At the same time, through a series of means, even if the evaluation is conducted within the scope of the evaluated party, the security and reliability of the evaluation results can be strictly guaranteed, solving the problem of balancing cost and high reliability of the evaluation results.

Description

Technical Field

[0001] The present invention belongs to the technical field of software evaluation, and in particular relates to a privacy measurement and control method and system based on a trusted execution environment. Background Art

[0002] In scenarios such as software development outsourcing, developers need a third party to conduct software evaluation before delivering the software to the client to ensure that the developed software meets the client's requirements. During the software evaluation process, the evaluator needs to deploy the system, evaluate the software in the authorized system, test every agreed-upon function of the software, and produce a corresponding conclusion report. Traditional software evaluation methods have the following two major drawbacks:

[0003] 1) The evaluator needs to set up an environment, and try to make it consistent with the production environment of the evaluated end, which is relatively costly.

[0004] Ideally, the evaluation would be conducted in the deployment environment being evaluated, significantly reducing deployment costs for the evaluating party. Since the evaluated party already has its own test environment, this would not increase costs significantly. However, this would expose the possibility of tampering by the evaluated party, making it impossible to strictly guarantee the credibility of the evaluation results.

[0005] 2) It is difficult to determine whether the evaluated software is actually the evaluated software during actual use in a production environment. Some software vendors provide the same version number of the implemented software as the software version used during the evaluation, but the actual code has been adjusted, which makes it difficult for users to verify in actual applications. Summary of the Invention

[0006] The purpose of this invention is to address the aforementioned issues by providing a privacy measurement and control method and system based on a trusted execution environment. Leveraging trusted execution environment (confidential computing) technology, this system, while ensuring trustworthiness, delegates software testing to the software being tested, which already has its own deployment environment. Software evaluation is performed within the trusted execution environment, and chip-level verifiable proof is generated to demonstrate the validity and credibility of the evaluation. Furthermore, for software users, the proposed software evaluation method allows for effective verification of whether the software being used is the software being tested or has been modified from a previously tested version.

[0007] In order to achieve the above object, the present invention adopts the following technical solutions:

[0008] A privacy measurement and control method based on a trusted execution environment, comprising the following steps performed by a software evaluator:

[0009] The software evaluator sends the evaluation management software M to the evaluated party;

[0010] The software evaluator deploys and starts the confidential computing remote authentication service RS;

[0011] The software evaluator obtains the measured value of the trusted execution environment TEE by the evaluated party, including the measured value of the measurement information of the evaluation management software M;

[0012] The software evaluator's confidential computing remote authentication service RS initiates a remote authentication process with the evaluated party based on the measurement value;

[0013] In response to the authentication being valid, a trusted connection is established with the evaluation management software M running in the trusted execution environment TEE of the evaluated party, and a secret key E and a signature private key S are allocated to the evaluation management software M. The secret key E and the signature private key S are trustworthy and sealed by the evaluation management software M;

[0014] The software evaluation direction sends an evaluation instruction to the evaluation management software M, and receives E(I) and S(E(I)) returned by the evaluation management software M;

[0015] E(I) is obtained by encrypting the test information I using the secret key E by the evaluation management software M. E(I) can be written to disk or temporarily stored in the TEE secure memory.

[0016] S(E(I)) is the signature of E(I) by the evaluation management software M based on the signature private key S;

[0017] The test information I is generated by the evaluation management software M based on the evaluation of the evaluated software C in the trusted execution environment according to the evaluation instructions;

[0018] In response to the S(E(I)) signature being valid, E(I) is decrypted, and the software evaluator obtains the plaintext test information;

[0019] In response to passing the test, the software evaluator records the software information of the evaluated software C and distributes an evaluation certificate.

[0020] After the software being evaluated receives M, M is started in the trusted execution environment.

[0021] In the above-mentioned privacy measurement and control method based on a trusted execution environment, the evaluation management software M is deployed in the initrd file system during the system startup process of the evaluated party;

[0022] Alternatively, the evaluation management software M is deployed in a file operating system OS loaded in the trusted execution environment TEE of the evaluated party.

[0023] In the above-mentioned privacy measurement and control method based on the trusted execution environment, the evaluated party obtains the measurement value by performing chip-level measurement through confidential computing. The measurement value includes the underlying trusted base TCB measurement information of the trusted execution environment TEE, kernel layer measurement information, and initrd measurement information;

[0024] When the evaluation management software M is deployed in the file system of initrd during the system startup process of the evaluated party, the confidential computing service provided by the trusted execution environment measures initrd including the measurement information of the evaluation management software M;

[0025] When the evaluation management software M is deployed in the file operating system OS loaded by the trusted execution environment TEE of the evaluated party, the measurement information of the evaluation management software M running in the file operating system OS is obtained through the TPM or virtual TPM.

[0026] The TEE's underlying trusted base (TCB) measurement information, kernel layer measurement information, and initrd measurement information are measured across the entire TEE using the confidential computing services provided by the TEE. When the evaluation management software M is deployed in the initrd file system during the system startup process of the evaluated party, the initrd measurement information includes the evaluation management software M's measurement information. Correct initrd measurement information indicates that M information is legal and correct.

[0027] In the above-mentioned privacy measurement and control method based on a trusted execution environment, the evaluation software T is sent to the evaluated party, and the evaluation management software M includes the startup information of the evaluation software T, or the confidential computing remote authentication service RS sends the startup information of the evaluation software T to the evaluation management software M based on the secure connection established based on remote authentication between the evaluation management software M and the confidential computing remote authentication service RS;

[0028] The user evaluation software T of the evaluated party manually evaluates the evaluated software C according to the evaluation instructions, or the evaluation software T automatically evaluates the evaluated software C based on the evaluation instructions.

[0029] In the above-mentioned privacy measurement and control method based on a trusted execution environment, the test information includes the hash value, version number, test results, test status, and screen recording information of the software being tested C;

[0030] In the case of manual evaluation, it also includes manual evaluation operation record information, such as mouse and keyboard operations, screen recording information, etc.

[0031] The software information includes the unique characteristic information of the software C being evaluated (such as a hash value, etc.).

[0032] In the above-mentioned privacy measurement and control method based on a trusted execution environment, the secret key E and the signature private key S are allocated to the evaluation management software M, specifically including:

[0033] Based on the trusted secure connection established between the evaluator's confidential computing remote authentication service RS and the evaluation management software M running in the trusted execution environment TEE of the evaluated party, the confidential computing remote authentication service RS sends the secret key authorization token Token to the evaluation management software M;

[0034] The key service KMS receives the key authorization token Token sent by the evaluation management software M based on the key request, and provides the corresponding key E and signature private key S to the evaluation management software M based on the legitimacy of the key authorization token Token.

[0035] In the above-mentioned privacy measurement and control method based on a trusted execution environment, this method also includes the software usage process:

[0036] Establish a trusted and secure connection with the software user, and also establish a trusted and secure connection through the confidential computing remote authentication service RS;

[0037] Receive a hardware signature report sent by the verification software R, which includes software verification information of the software C' to be used;

[0038] After the hardware signature report is verified, the software verification information is obtained;

[0039] The verification software R is authorized by the software evaluator or provided to the software user, or is developed by the software user. The verification software R includes startup information of the software to be used C', and the software to be used C' has been evaluated by the above method;

[0040] The software user obtains software verification information by triggering the startup of the software to be used C' in the trusted execution environment (TEE) through verification software R and measuring and reading the software to be used C'. The software verification information includes unique feature information of the software to be used C' (such as hash value, etc.);

[0041] Compare the software verification information with the software information recorded during the evaluation phase and feed back the verification results to the verification software R;

[0042] The verification software R decides whether to continue starting and using the software C' to be used based on the verification result.

[0043] In the above-mentioned privacy measurement and control method based on a trusted execution environment, the verification software R performs periodic or random real-time measurements and reads the verification information of the software C' to be used after the software C' to be used is started to perform life cycle verification on the software C' to be used;

[0044] The evaluation instructions are sent intermittently in real time according to the evaluation status.

[0045] A privacy measurement and control system based on a trusted execution environment includes a software evaluator and an evaluated party. The software evaluator establishes a trusted connection with the evaluated party and is controlled by the software evaluator through the above method to perform software evaluation on the evaluated software C in the trusted execution environment of the evaluated party, record software information, and distribute evaluation certificates.

[0046] In the above-mentioned privacy measurement and control system based on a trusted execution environment, the system also includes a software user, and the software evaluator also establishes a trusted connection with the software user. The software evaluator uses the above-mentioned method to compare and verify whether the software C' to be used is consistent with the software to be evaluated C, and decides whether to continue to start and use the software C' to be used based on the verification results.

[0047] The advantages of the present invention are:

[0048] This solution proposes conducting the evaluation within the scope of the evaluated party, which can greatly reduce the deployment costs of the evaluator. At the same time, through a series of measures, it can strictly guarantee the security and reliability of the evaluation results even if the evaluation is conducted within the scope of the evaluated party, thus solving the problem of balancing cost and high reliability of the evaluation results.

[0049] While achieving high credibility of the evaluation results of the evaluated party, it is further proposed to locally save the software information of the evaluated software containing unchangeable unique characteristic information, and provide verification software to the user. When the user uses the software, the verification software obtains the software information of the software used as verification information. By comparing and verifying it with the software information stored in the evaluation stage, it can be guaranteed that the software used by the user is the software being evaluated, which further solves the current problem that users cannot guarantee that the software they use has not been modified and is consistent with the software being evaluated. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 This is a schematic diagram of data flow among relevant parties in the privacy measurement and control system based on a trusted execution environment of the present invention. The dotted arrows in the figure represent data flow based on a trusted secure connection.

[0051] Figure 2 This is a flowchart of a privacy measurement and control method based on a trusted execution environment in Example 1 of the present invention;

[0052] Figure 3 This is a flow chart of a method for performing trusted verification of software used by a user based on privacy measurement and control in a privacy measurement and control method based on a trusted execution environment in the first embodiment of the present invention;

[0053] Figure 4 This is a flow chart of the method for privacy measurement and control based on a trusted execution environment in the fourth embodiment of the present invention. DETAILED DESCRIPTION

[0054] Example 1

[0055] like Figure 1 and Figure 2 As shown, the present invention provides a privacy measurement and control method based on a trusted execution environment. The method involves three parties: the software evaluator, the evaluated party, and the software user. The implementation process is as follows:

[0056] 1. The software evaluator sends the evaluation management software M and evaluation software T to the evaluated party. Evaluation software T refers to some testing software, such as Seleniu or JMeter. Evaluation management software M is provided by the evaluator, connects with the evaluator, and manages the evaluation process. Evaluation software T is selected by the evaluator. Specific performance and functional testing is beyond the scope of this solution and is not limited or detailed here.

[0057] 2. The software evaluator deploys and starts the confidential computing remote authentication service RS, starts the application in the trusted execution environment, measures the trusted execution environment and the application, and generates a chip-level signature report (Report) signed by the hardware (chip). The report is sent to the remote user. Here, the application is started in the trusted execution environment of the evaluated party. The remote user is the software evaluator. The remote user verifies the legitimacy of the report based on the relevant verification mechanism, extracts the measurement value in the report and compares it with the expected measurement value saved by the user end. If it matches, it continues to establish a secure connection with the trusted environment. This process is the confidential computing remote authentication service.

[0058] 3. The evaluation management software M is deployed in the initrd file system during the evaluated system startup process. The evaluated system starts the TEE, which loads the initrd and file operating system (OS) and triggers the evaluation management software M.

[0059] 4. The assessed party measures the entire trusted execution environment (TEE) at the chip level based on the confidential computing services provided by the trusted execution environment (TEE), including the underlying trusted base (TCB), kernel layer, initrd, file operating system (OS), etc. The measured object includes the initrd, which contains information about the software evaluation and management software M.

[0060] 5. Initiate the confidential computing remote authentication process based on the measurement value obtained in process 4. This involves performing a chip-level signature on this measurement value and related parameters, sending the signature to the software evaluator's confidential computing remote authentication service (RS) for verification and legitimacy verification. If the measurement value is valid, it indicates that the evaluation management software M running in the trusted execution environment (TEE) of the evaluated party is authorized and recognized by the software evaluator, meeting the evaluator's requirements. The confidential computing remote authentication service (RS) then directly establishes a trusted and secure connection with the evaluation management software M running in the trusted execution environment (TEE) of the evaluated party. For existing remote authentication processes in the industry, reference can be made to Intel RA-TLS, for example, and the details will not be detailed here.

[0061] 6. Based on the trusted and secure connection established above, the confidential computing remote authentication service RS sends the secret key authorization token Token to the evaluation management software M.

[0062] 7. The evaluation management software M establishes a secure connection with the evaluator's key management service (KMS). The evaluation management software M sends a key authorization token (Token) to the key management service (KMS) to request a key. After verifying the validity of the token, the key management service (KMS) sends the software evaluator's symmetric encryption key (E) and signature private key (S) back to the evaluation management software M. Symmetric encryption key (E) and signature private key (S) are pre-generated by the software evaluator and stored in the key management service (KMS). Generating symmetric and asymmetric keys is a well-established technology, with well-established cryptographic libraries available, such as calling the OpenSSH package. The software evaluator can generate key pairs using existing techniques and will not be elaborated on here.

[0063] 8. The evaluation management software M uses the Trusted Execution Environment (TEE) trusted storage technology to perform local trusted storage of S and E. Trusted storage in the Trusted Execution Environment (TEE) means that S and E are encrypted and stored on the hard drive of the evaluated party using a chip-level derived key. Even the highest-privileged user on the evaluated party's host cannot steal or spy on this encrypted information. This encrypted information can only be loaded and used by the evaluation management software M in the TEE.

[0064] 9. Based on the evaluator's confidential computing remote authentication service RS, a trusted and secure connection is directly established with the evaluation management software M running in the trusted execution environment TEE of the evaluated party. The confidential computing remote authentication service RS sends instructions for relevant evaluation projects to the evaluation management software M.

[0065] 10. Based on the corresponding evaluation instructions, the evaluation management software M launches the evaluation software T and the evaluated software C. Evaluation instructions can be sent intermittently in real time based on the evaluation status. For example, after a functional unit item is tested, the evaluation management software M will provide feedback to the evaluator indicating that the functional unit item has been completed, allowing the evaluator to issue new test instructions.

[0066] 11. According to the evaluation requirements and evaluation instructions, the evaluated software C is automatically evaluated based on the evaluation software T in the trusted execution environment TEE.

[0067] 12. Evaluation management software M collects and generates test information I. Test information includes, but is not limited to, the hash value and version number of the evaluated software C, test results, test status, and screen recordings.

[0068] 13. The evaluation management software M encrypts the test information I using the secret key E and writes it to disk as E(I). The evaluation management software M signs E(I) using the signature private key S to generate S(E(I)).

[0069] 14. After the evaluation is completed, the evaluator can choose to have the evaluation management software M delete the relevant evaluation software T, secret key E, and signature private key S according to the needs of the evaluator.

[0070] 15. The evaluation management software M sends E(I) and S(E(I)) to the evaluator;

[0071] 16. The evaluator verifies the validity of the signature based on the public key corresponding to S. If valid, it reads E(I).

[0072] 17. Decrypt and restore the plaintext data of I based on the symmetric key E and parse the relevant test information.

[0073] 18. If the software passes the evaluator's test standards, the software information being evaluated (including hash value, software name, version information, software feature value, etc.) will be registered and a corresponding certificate will be issued.

[0074] 19. The software information being evaluated is stored in the corresponding database D of the evaluator.

[0075] The evaluation process is now complete. The following is the software usage process. Figure 3 A flow chart of the verification method from the perspective of software evaluation is given:

[0076] 20. The software user deploys and launches the verification software R, authorized and trusted by the evaluator, in the trusted execution environment. Based on user needs, the user can establish a connection with the software evaluator through remote authentication to verify the legitimacy and validity of R. The verification software R can be obtained from the software evaluator, a third party, or developed by the software user itself, as long as it is authorized and trusted by the evaluator.

[0077] 21. If a user wishes to use software C', verification software R can trigger the launch of software C' in a trusted execution environment based on configuration information. Verification software R simultaneously measures and reads software information (hash value, software name, version information, software feature values, etc.) as verification information for user verification. In other words, users can configure verification software R to perform verification, and only after passing verification can software C' be used normally. Alternatively, users can directly use software C' without verification, meaning they can configure the software to launch at any time without verifying software C'.

[0078] 22. Based on the remote authentication process, this verification information is signed by the hardware and transmitted to the verification service TS of the software evaluator based on a secure connection. Based on its database D, this software information is compared and verified for legitimacy, and the software information of this software C' saved during the evaluation phase is extracted. If the verification information is consistent with the software information, especially the unique feature information of the software, such as the hash value, it is considered that the software C' has not been changed and is the version when it was evaluated.

[0079] 23. The verification service TS returns the result of whether the legality check passes to the verification software R.

[0080] 24. Verification software R decides whether to continue starting and using software C' based on the verification results.

[0081] In this way, it can be ensured that the software dynamically used by users is always software recognized and valid by the evaluators.

[0082] As an option, the above steps 21-24 can be used to perform periodic or random real-time measurements and read software information after the software is started according to the requirements of the user or evaluator, so as to verify in real time and ensure the security and reliability of the software throughout its life cycle.

[0083] Example 2

[0084] This embodiment is similar to the first embodiment, except that in this embodiment, the evaluation management software M is deployed in the file operating system (OS) loaded by the trusted execution environment (TEE) of the evaluated party. Accordingly, in process 4, the measurement target includes information about the software evaluation management software M running in the file operating system (OS). In this case, the measurement operation on the software evaluation management software M running in the file operating system (OS) can be implemented based on the confidential computing services provided by the TPM evaluation management software M or the VirtualTPM evaluation management software M.

[0085] Example 3

[0086] This embodiment is similar to the first embodiment, except that, in this embodiment, the evaluation of the evaluated party is performed manually by the evaluated party's staff (using interactive tools such as a mouse and keyboard). Accordingly, in this embodiment, the test information I also includes manual test information such as mouse and keyboard recordings and screen recordings to ensure that the evaluation process meets the evaluation requirements. The software evaluator may or may not send the evaluation software T as needed.

[0087] Example 4

[0088] like Figure 4 As shown, this embodiment is similar to the first embodiment, except that, in this embodiment, after the software evaluator passes the measurement value signature verification, it allocates a secret key E and a signature private key S to the evaluated party, and sends the secret key E and the signature private key S to the evaluation management software M running in the trusted execution environment of the evaluated party, without the evaluation management software M needing to request the secret key based on the secret key authorization token Token. Figure 4 What is given is a flowchart of the method from the perspective of software evaluation.

[0089] The specific embodiments described herein are merely illustrative of the spirit of the present invention. Persons skilled in the art may make various modifications, additions, or substitutions to the described specific embodiments without departing from the spirit of the present invention or exceeding the scope of the appended claims.

[0090] Although this document frequently uses terms such as evaluation management software M, confidential computing remote authentication service RS, key authorization token Token, secret key E, signature private key S, evaluation software T, evaluated software C, software to be used C', and verification software R, the use of other terms is not excluded. These terms are used solely to more conveniently describe and explain the essence of the present invention; interpreting them as any additional limitations would be contrary to the spirit of the present invention.

Claims

1. A privacy measurement and control method based on a trusted execution environment, characterized in that: The method includes: Send the evaluation management software M to the evaluated party; Deploy and start the confidential computing remote authentication service RS; Obtain the measured values ​​of the Trusted Execution Environment (TEE) including the measurement information of the measurement management software M by the evaluated party; The confidential computing remote authentication service RS initiates a remote authentication process with the evaluated party based on the measurement value; In response to the authentication being valid, a trusted connection is established with the evaluation management software M running in the trusted execution environment TEE of the evaluated party, and a secret key E and a signature private key S are allocated to the evaluation management software M. The secret key E and the signature private key S are trustworthy and sealed by the evaluation management software M; Send an evaluation instruction to the evaluation management software M, and receive E(I) and S(E(I)) returned by the evaluation management software M; E(I) is obtained by encrypting the test information I using the secret key E by the evaluation management software M; S(E(I)) is the signature of E(I) by the evaluation management software M based on the signature private key S; The test information I is generated by the evaluation management software M based on the evaluation of the evaluated software C in the trusted execution environment according to the evaluation instructions; In response to the signature of S(E(I)) being valid, decrypt E(I) to obtain the plaintext test information; In response to passing the test, software information of the evaluated software C is recorded and an evaluation certificate is distributed.

2. The privacy measurement and control method based on a trusted execution environment according to claim 1, characterized in that: The evaluation management software M is deployed in the initrd file system during the system startup process of the evaluated party; Alternatively, the evaluation management software M is deployed in a file operating system OS loaded in the trusted execution environment TEE of the evaluated party.

3. The privacy measurement and control method based on a trusted execution environment according to claim 2, characterized in that: The evaluated party obtains the aforementioned measurement values ​​through chip-level measurement through confidential computing. The measurement values ​​include the underlying trusted base TCB measurement information of the trusted execution environment TEE, kernel layer measurement information, and initrd measurement information; When the evaluation management software M is deployed in the initrd file system during the system startup process of the evaluated party, the initrd measurement information includes the evaluation management software M measurement information, and the confidential computing service provided by the trusted execution environment measures the initrd; When the evaluation management software M is deployed in the file operating system OS loaded by the trusted execution environment TEE of the evaluated party, the measurement information of the evaluation management software M running in the file operating system OS is obtained through the TPM or virtual TPM.

4. The privacy measurement and control method based on a trusted execution environment according to claim 1, characterized in that: Sending the evaluation software T to the evaluated party, wherein the evaluation management software M includes the startup information of the evaluation software T, or the confidential computing remote authentication service RS sends the startup information of the evaluation software T to the evaluation management software M based on the secure connection between the evaluation management software M and the confidential computing remote authentication service RS; The user evaluation software T of the evaluated party manually evaluates the evaluated software C according to the evaluation instructions, or the evaluation software T automatically evaluates the evaluated software C based on the evaluation instructions.

5. The privacy measurement and control method based on a trusted execution environment according to claim 1, characterized in that: The test information includes the hash value, version number, test results, test status, and screen recording information of the software being tested C; In case of manual evaluation, the manual evaluation operation record information is also included; The software information includes unique characteristic information of the software C being evaluated.

6. The privacy measurement and control method based on a trusted execution environment according to claim 1, characterized in that: Assign the secret key E and signature private key S to the evaluation management software M, including: Based on the trusted secure connection established between the evaluator's confidential computing remote authentication service RS and the evaluation management software M running in the trusted execution environment TEE of the evaluated party, the confidential computing remote authentication service RS sends the secret key authorization token Token to the evaluation management software M; The key service KMS receives the key authorization token Token sent by the evaluation management software M based on the key request, and provides the corresponding key E and signature private key S to the evaluation management software M based on the legitimacy of the key authorization token Token.

7. The privacy measurement and control method based on a trusted execution environment according to claim 1, characterized in that: The method further comprises: Establish a trusted and secure connection with software users; Receive a hardware signature report sent by the verification software R containing software verification information of the software C' to be used; Verify the hardware signature report to obtain the software verification information; The verification software R includes startup information of the software C' to be used, and the software C' to be used has been evaluated by the method of claim 1; The software user obtains the software verification information by triggering the startup of the software to be used C' in the trusted execution environment TEE through the verification software R and measuring and reading the software to be used C'. The software verification information includes the unique feature information of the software to be used C'; Compare the software verification information with the software information recorded during the evaluation phase and feed back the verification results to the verification software R; The verification software R decides whether to continue starting and using the software C' to be used based on the verification result.

8. The privacy measurement and control method based on a trusted execution environment according to claim 7, characterized in that: The verification software R performs periodic or random real-time measurement after the software C' to be used is started, and reads the verification information of the software C' to be used to perform life cycle verification on the software C' to be used; The evaluation instructions are sent intermittently in real time according to the evaluation status.

9. A privacy measurement and control system based on a trusted execution environment, characterized in that: The software evaluator and the evaluated party establish a trusted connection, and the software evaluator is controlled by the software evaluator through the method described in any one of claims 1 to 6 to perform software evaluation on the evaluated software C in the trusted execution environment of the evaluated party, record software information, and distribute evaluation certificates.

10. The privacy measurement and control system based on a trusted execution environment according to claim 9, characterized in that: The system also includes a software user, and the software evaluator also establishes a trusted connection with the software user, and uses the method described in claim 7 to compare and verify whether the software C' to be used is consistent with the software C to be evaluated, and decides whether to continue to start and use the software C' to be used based on the verification result.

Images