Remote attestation method and apparatus based on trusted execution environment, medium, device and product

Abstract

A remote attestation method, device, medium, equipment and product based on a trusted execution environment. The method comprises: receiving a remote attestation request for a first collection service; the first collection service is deployed in a virtual machine in the trusted execution environment; obtaining a first measurement value of a first collection rule loaded by the first collection service and a first measurement benchmark value of a configuration collection rule of the first collection service, the first collection service being used to collect operation and maintenance data of a first service in the virtual machine based on the first collection rule; and performing remote attestation on the first collection rule according to the first measurement value and the first measurement benchmark value to determine whether the first collection service is trustworthy. In this way, the remote attestation technology can be combined to verify whether the collection service used to collect the operation and maintenance data of the first service indeed loads the collection rule set by the user, so as to prove that the collection service running in the confidential virtual machine is trustworthy, thereby ensuring the trustworthiness of the exposed operation and maintenance data.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of computer, in particular, to a remote attestation method and device based on trusted execution environment, medium, equipment and product. BACKGROUND

[0002] Confidential cloud computing is a technology for efficiently processing sensitive data in a secure isolated environment protected by hardware. The content (data processed and code used to process data) in the secure isolated environment has confidentiality and integrity guarantees, and other entities including the Basic Input Output System (BIOS), operating system, etc. cannot know the content in the secure isolated environment. Confidential cloud computing uses Trusted Execution Environment (TEE) to realize the privacy and security of data during the computing process, that is, only the authorized application itself can securely access its sensitive data, and unauthorized applications cannot spy on or steal sensitive data.

[0003] With the continuous construction of confidential cloud computing infrastructure and services running thereon, it is increasingly important to maintain the services running inside the confidential virtual machine. For a party providing confidential cloud computing service infrastructure, it needs to maintain the ability to grasp the resource allocation status and timely detect potential performance bottlenecks and security risks. For a party using confidential cloud computing services, it is urgent to use maintenance data to deeply analyze the actual use of the rented resources and ensure the stable operation of its own services. In related technologies, maintenance data is usually collected by a collection service set on the confidential cloud computing, and then the problem of how to verify that the collection service is trustworthy and secure arises. SUMMARY

[0004] This summary is provided to introduce a selection of concepts that are further described below in the detailed description. This summary is not intended to identify key or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.

[0005] In a first aspect, the present disclosure provides a remote attestation method based on a trusted execution environment, comprising:

[0006] receiving a remote attestation request for a first collection service; wherein the first collection service is deployed in a virtual machine in a trusted execution environment;

[0007] The first acquisition rule is loaded by the first acquisition service, and a first metric value of the first acquisition rule is obtained, and a first metric reference value of a configuration acquisition rule of the first acquisition service is obtained; the configuration acquisition rule is an acquisition rule configured in advance for the first acquisition service, and the first acquisition service is configured to collect operation and maintenance data of a first service in the virtual machine based on the first acquisition rule.

[0008] The first acquisition rule is remotely attested based on the first metric value and the first metric reference value to determine whether the first acquisition service is trustworthy.

[0009] In a second aspect, the present disclosure provides a remote attestation apparatus based on a trusted execution environment, comprising:

[0010] A receiving module is configured to receive a remote attestation request for a first acquisition service; the first acquisition service is deployed in a virtual machine in a trusted execution environment.

[0011] A first obtaining module is configured to obtain a first metric value of a first acquisition rule loaded by the first acquisition service, and obtain a first metric reference value of a configuration acquisition rule of the first acquisition service; the configuration acquisition rule is an acquisition rule configured in advance for the first acquisition service, and the first acquisition service is configured to collect operation and maintenance data of a first service in the virtual machine based on the first acquisition rule.

[0012] A first remote attestation module is configured to remotely attest the first acquisition rule based on the first metric value and the first metric reference value to determine whether the first acquisition service is trustworthy.

[0013] In a third aspect, the present disclosure provides a computer readable medium having a computer program stored thereon, the computer program being executed by a processing apparatus to implement the steps of the remote attestation method based on a trusted execution environment provided in the first aspect of the present disclosure.

[0014] In a fourth aspect, the present disclosure provides an electronic device, comprising: a storage device having a computer program stored thereon; and a processing apparatus configured to execute the computer program in the storage device to implement the steps of the remote attestation method based on a trusted execution environment provided in the first aspect of the present disclosure.

[0015] In a fifth aspect, the present disclosure provides a computer program product comprising a computer program, the computer program being executed by a processor to implement the steps of the remote attestation method based on a trusted execution environment provided in the first aspect of the present disclosure.

[0016] In the technical solution, a remote attestation request for a first collection service is received, wherein the first collection service is deployed in a virtual machine (i.e., a confidential virtual machine) in a trusted execution environment; then, a first measurement value of a first collection rule loaded by the first collection service and a first measurement benchmark value of a configuration collection rule of the first collection service are obtained, the first collection service is used to collect operation and maintenance data of a first service in the virtual machine based on the first collection rule; and finally, the first collection rule is remotely attested based on the first measurement value and the first measurement benchmark value, to determine whether the first collection service is trusted. In this way, the remote attestation technology can be combined to verify the trustworthiness of the collection service for collecting the operation and maintenance data of the first service, to prove that the collection service running in the confidential virtual machine is trusted, so as to ensure the trustworthiness of the exposed operation and maintenance data.

[0017] Other features and advantages of the present disclosure will be described in detail in the following detailed description section. BRIEF DESCRIPTION OF DRAWINGS

[0018] The above and other features, advantages, and aspects of embodiments of the present disclosure will become more apparent by describing in detail exemplary embodiments thereof with reference to the attached drawings in which:

[0019] Figure 1 FIG. 1 is a flowchart of a remote attestation method based on a trusted execution environment according to an exemplary embodiment.

[0020] Figure 2 FIG. 2 is a flowchart of a measurement method of a collection service according to an exemplary embodiment.

[0021] Figure 3 FIG. 3 is a flowchart of a measurement method of a collection service according to an exemplary embodiment.

[0022] Figure 4 FIG. 4 is a schematic diagram of a security design framework of a confidential virtual machine according to an exemplary embodiment.

[0023] Figure 5 FIG. 5 is a schematic diagram of a security design framework of a confidential virtual machine according to another exemplary embodiment.

[0024] Figure 6 FIG. 6 is a block diagram of a remote attestation device based on a trusted execution environment according to an exemplary embodiment.

[0025] Figure 7 FIG. 7 is a structural schematic diagram of an electronic device according to an exemplary embodiment. DETAILED DESCRIPTION

[0026] Embodiments of the present disclosure will be described in more detail below with reference to the drawings. Although some embodiments of the present disclosure are shown in the drawings, it is understood that the present disclosure can be implemented in various forms and should not be interpreted as being limited to the embodiments set forth herein, but rather these embodiments are provided so as to more completely and thoroughly understand the present disclosure. It is understood that the drawings and embodiments of the present disclosure are for exemplary purposes only and are not intended to limit the scope of protection of the present disclosure.

[0027] It should be understood that each step described in the method embodiments of the present disclosure can be performed in different orders and / or in parallel. In addition, the method embodiments can include additional steps and / or omit the steps shown. The scope of the present disclosure is not limited in this respect.

[0028] The term "comprising" and variations thereof as used herein are open-ended, that is "including but not limited to". The term "based on" is "based, at least in part, on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". Related definitions are given below in the description of the application.

[0029] It should be noted that the terms "first", "second", and the like in the present disclosure are only used to distinguish different devices, modules or units, and are not intended to limit the order or interdependence of the functions performed by these devices, modules or units.

[0030] It should be noted that the terms "one", "multiple" in the present disclosure are illustrative and not limiting, and those skilled in the art should understand that unless otherwise explicitly stated in the context, it should be understood as "one or more".

[0031] The names of the messages or information exchanged between the devices in the embodiments of the present disclosure are only for illustrative purposes and are not intended to limit the scope of the messages or information.

[0032] It can be understood that before using the technical solutions disclosed in the embodiments of the present disclosure, the type of information involved in the present disclosure, the scope of use, the use scenario, etc. should be informed to the relevant user and the authorization of the relevant user should be obtained by appropriate means, wherein the relevant user can include any type of right subject, such as an individual, an enterprise, or a group.

[0033] For example, in response to receiving an active request of a user, a prompt information is sent to the relevant user to explicitly prompt the relevant user that the operation requested to be performed will require obtaining and using information of the relevant user, so that the relevant user can voluntarily select whether to provide information to the software or hardware such as an electronic device, an application program, a server or a storage medium performing the operation of the technical solution of the present disclosure according to the prompt information.

[0034] As an optional but non-limiting implementation manner, in response to receiving an active request of a relevant user, the prompt information can be sent to the relevant user in the manner of a pop-up window, and the prompt information can be presented in the form of text in the pop-up window. In addition, the pop-up window can also carry selection controls for the user to select "agree" or "disagree" to provide information to the electronic device.

[0035] It can be understood that the above notification and user authorization process is only illustrative and does not limit the implementation of the present disclosure, and other manners meeting relevant laws and regulations can also be applied to the implementation of the present disclosure.

[0036] It can be understood that the data involved in the technical solution (including but not limited to the data itself, the obtaining, use, storage or deletion of the data) should comply with the requirements of relevant laws and regulations and relevant provisions.

[0037] Figure 1 is a flowchart of a remote attestation method based on a trusted execution environment according to an exemplary embodiment. As shown in Figure 1 The remote attestation method based on the trusted execution environment can include the following S101-S103.

[0038] In S101, a remote attestation request for a first collection service is received, and the first collection service is deployed in a virtual machine in a trusted execution environment.

[0039] In S102, a first measurement value of a first collection rule loaded by the first collection service is obtained, and a first measurement reference value of a configuration collection rule of the first collection service is obtained.

[0040] In the present disclosure, the configuration collection rule is a collection rule pre-configured for the first collection service, and the first collection rule is a collection rule actually used by the first collection service when collecting operation and maintenance data of the first service. The first collection service is used to collect operation and maintenance data of the first service in a confidential virtual machine (i.e., a virtual machine deployed in a TEE) based on the first collection rule. The configuration collection rule is used to guide the first collection service to collect data of which service in the confidential virtual machine, for example, the configuration collection rule is used to guide the first collection service to collect log data of the first service in the confidential virtual machine.

[0041] The first metric reference value of the configuration rule of the first collection service can be a hash value of the collection rule configured by the first collection service, and the first metric value of the first collection rule loaded by the first collection service can be a hash value of the first collection rule loaded by the first collection service.

[0042] The first service is deployed in a virtual machine, and the first service can include one or more service services in the virtual machine. The operation and maintenance data of the first service can include at least one of log data, event data, and index data (for example, CPU occupancy). Different types of collection services (collectors) can be used to collect different types of operation and maintenance data of the first service. Multiple collection services can be deployed in the confidential virtual machine. The types of operation and maintenance data collected by some of the multiple collection services can be the same, or the multiple collection services can be used to collect different types of operation and maintenance data. The first collection service is any collection service deployed in the confidential virtual machine. The first collection service can be used to collect one of log data, event data, and index data.

[0043] In S103, the first collection rule is remotely certified according to the first metric value and the first metric reference value, to determine whether the first collection service is trustworthy.

[0044] In the present disclosure, remote certification is designed for transparent certification of TEE, and combines the full-link capabilities of environment measurement, proof report acquisition, and proof verification, to help cloud users quickly and conveniently complete security verification of TEE and load.

[0045] When a user wants to verify whether the first collection service running in the confidential virtual machine collects operation and maintenance data of the corresponding service service according to the collection rule specified by the user, to verify whether the first collection service maliciously collects, forwards, modifies, or loses the operation and maintenance data of the service service, the application deployed in the non-TEE can initiate a remote certification instruction for the first collection service. After receiving the remote certification instruction, the application sends a remote certification request for the first collection service to the remote certification service deployed in the confidential virtual machine. After receiving the remote certification request, the remote certification service can remotely certify the collection service actually loaded with the collection rule set by the user, to verify the trustworthiness of the first collection service. The trustworthiness verification of the first collection service can include at least one of verification of whether the first collection service actually loaded the collection rule set by the user.

[0046] After the first metric value and the first metric reference value are acquired, the two values can be compared for consistency to remotely prove the first collection rule, so as to determine whether the first collection rule is trustworthy, and thus whether the first collection service is trustworthy. Specifically, if the first metric value and the first metric reference value are consistent, it is determined that the first collection rule is trustworthy, that is, the first collection service indeed loads the collection rule set by the user, and at this time, it can be determined that the first collection service is trustworthy; if the first metric value and the first metric reference value are inconsistent, it is determined that the first collection rule is untrustworthy, that is, the first collection service does not correctly load the collection rule set by the user, for example, the collection rule is missed, the collection rule is loaded more, or the collection rule is modified, and at this time, it can be determined that the first collection service is untrustworthy.

[0047] In the above technical solution, a remote proof request for the first collection service is received, wherein the first collection service is deployed in a virtual machine (i.e., a confidential virtual machine) in a trusted execution environment; then, a first metric value of a first collection rule loaded by the first collection service and a first metric reference value of a configuration collection rule of the first collection service are acquired, the first collection service being used to collect operation and maintenance data of the first service in the virtual machine based on the first collection rule; finally, the first collection rule is remotely proved according to the first metric value and the first metric reference value, so as to determine whether the first collection service is trustworthy. In this way, the trustworthiness of the collection service used to collect the operation and maintenance data of the first service can be verified in combination with the remote proof technology to prove that the collection service running in the confidential virtual machine is trustworthy, so as to guarantee the trustworthiness of the exposed operation and maintenance data.

[0048] In a possible implementation, the trustworthiness verification of the first collection service can not only include the verification of whether the first collection service indeed loads the collection rule set by the user, but also include the trustworthiness verification of an image of the first collection service. In this way, not only the collection rule set by the user can be verified, but also the image of the first collection service can be verified for trustworthiness, so as to improve the trustworthiness of the first collection service. At this time, the remote proof method based on the trusted execution environment can include the following two steps in addition to S101-S103:

[0049] acquiring a second metric value of a first image of the first collection service and a second metric reference value;

[0050] remotely proving the first image according to the second metric value and the second metric reference value, so as to determine whether the first collection service is trustworthy.

[0051] In the present disclosure, the second metric value of the first image of the first collection service can be calculated by using a hash algorithm on the content of the first image, and the second metric reference value of the first image of the first collection service can be a baseline metric value of the first image of the first collection service, which can be reproduced by the first image.

[0052] After obtaining the second metric value and the second metric reference value, consistency comparison can be performed thereon to remotely prove the first image of the first collection service, so as to determine whether the first image of the first collection service is trustworthy, and further determine whether the first collection service is trustworthy. Specifically, if the second metric value and the second metric reference value are consistent, it is determined that the first image of the first collection service is trustworthy, and if the second metric value and the second metric reference value are inconsistent, it is determined that the first image of the first collection service is untrustworthy.

[0053] If the first collection service indeed loads the collection rule set by the user and the first image of the first collection service is trustworthy, it can be determined that the first collection service is trustworthy, and if the first collection service does not correctly load the collection rule set by the user or the first image of the first collection service is untrustworthy, it can be determined that the first collection service is untrustworthy.

[0054] The specific implementation of obtaining the first metric value of the first collection rule loaded by the first collection service in S102 will be described in detail below. Specifically, the first metric value of the first collection rule loaded by the first collection service can be obtained by measuring the first collection rule after the first collection service creates the configuration collection rule, so that the first metric value can be obtained directly after receiving the remote proof request. Specifically, the remote proof method based on the trusted execution environment can further include the following two steps:

[0055] Detecting whether the configuration collection rule is created by the detection service;

[0056] In the case where the detection service detects that the configuration collection rule is created, the first collection rule is measured to obtain the first metric value.

[0057] In the present disclosure, the detection service is deployed in the virtual machine, as shown in S201 of Figure 2 and S301 of Figure 3 The detection service can be created in the virtual machine by kubernetes (K8s for short), which is used to detect whether the user creates the configuration collection rule of the first collection service, as shown in S204 of Figure 2 and S305 of Figure 3 After the detection service detects that the user creates the configuration collection rule of the first collection service, the first collection rule loaded by the first collection service can be measured to obtain the first metric value.

[0058] wherein K8s is an abbreviation of replacing the 8 middle characters of the name "ubernete" with 8. K8s is an open source, used for managing containerized applications on multiple hosts in a cloud platform.

[0059] In a possible implementation, the remote attestation method based on the trusted execution environment can further include the following three steps:

[0060] Detect whether the configuration collection rule is updated by the detection service;

[0061] In the case where the detection service detects that the configuration collection rule is updated, re-measure the first collection rule loaded by the first collection service to obtain a new first measurement value, and determine a new first measurement benchmark value corresponding to the updated configuration collection rule;

[0062] Update the first measurement value to the new first measurement value, and update the first measurement benchmark value to the new first measurement benchmark value.

[0063] In the present disclosure, during the running of the first collection service, the user can dynamically update the configuration collection rule of the first collection service, for example, add new collection rules, modify the configured collection rules, or delete part of the collection rules. During this period, the detection service can be used to detect whether the configuration collection rule is updated. In the case where the detection service detects that the configuration collection rule is updated, in order to ensure the real-time accuracy of the first measurement value and the first measurement benchmark value, the first collection rule loaded by the first collection service can be re-measured to obtain a new first measurement value, and a new first measurement benchmark value corresponding to the updated configuration collection rule can be determined. The first measurement value is updated to the new first measurement value, and the first measurement benchmark value is updated to the new first measurement benchmark value.

[0064] In the above implementation, the collection rule of the first collection service can be dynamically updated during the running of the first collection service, and the updated configuration collection rule can be dynamically loaded in the first collection service, so as to improve the flexibility of the configuration collection rule and support the verification of the dynamically updated collection rule.

[0065] In a possible implementation, in order to further improve the trustworthiness of the first collection service, in addition to the trustworthiness verification of the image and the collection rule of the first collection service, the detection service relied on by the first collection service can also be subjected to trustworthiness verification. Specifically, the remote attestation method based on the trusted execution environment can further include the following steps:

[0066] Remote attestation of the detection service is performed to verify the trustworthiness of the detection service.

[0067] In an implementation, the fifth measurement value of the fourth image of the detection service can be obtained first, and then the fourth image is remotely attested according to the fifth measurement value and the fifth measurement reference value to determine whether the fourth image of the detection service is trustworthy.

[0068] After the fifth measurement value and the fifth measurement reference value are obtained, the two can be compared for consistency to remotely attest the fourth image of the detection service, so as to determine whether the fourth image of the detection service is trustworthy. Specifically, if the fifth measurement value and the fifth measurement reference value are consistent, it is determined that the fourth image of the detection service is trustworthy, and if the fifth measurement value and the fifth measurement reference value are inconsistent, it is determined that the fourth image of the detection service is untrustworthy.

[0069] In the present disclosure, the fifth measurement value of the fourth image of the detection service can be calculated by using a hash algorithm on the content of the fifth image, and the fifth measurement reference value of the fourth image of the detection service can be a baseline measurement value of the fourth image of the detection service, which can be reproduced by the fourth image.

[0070] The specific implementation of obtaining the fifth measurement value of the fourth image of the detection service is described in detail below. Specifically, as shown in S202 in Figure 2 and S303 in Figure 3 , the fifth image of the detection service can be measured after the detection service is created to obtain the fifth measurement value, so that the fifth measurement value that is measured in advance can be directly obtained after receiving the remote attestation request. Specifically, the remote attestation method based on the trusted execution environment can further include the following steps:

[0071] The fifth image of the detection service is measured when the detection service is created to obtain the fifth measurement value.

[0072] The specific implementation of obtaining the second measurement value of the first image of the first collection service is described in detail below. Specifically, as shown in S202 in Figure 2 and S303 in Figure 3 , the first image of the first collection service can be measured after the first collection service is created to obtain the second measurement value, so that the second measurement value that is measured in advance can be directly obtained after receiving the remote attestation request. Specifically, the remote attestation method based on the trusted execution environment can further include the following steps:

[0073] The first image of the first collection service is measured when the first collection service is created to obtain the second measurement value.

[0074] In the present disclosure, the first collection service can be created in various ways. As shown in Figure 2As shown in S201 in FIG. 2, the detection service can be created by K8s at the same time as the first collection service.

[0075] In another embodiment, as shown in FIG. 3, the detection service can be created by K8s first, and then the detection service is used to detect whether a custom resource (CR) of the first collection service is created. After the detection service detects that the CR of the first collection service is created, the first collection service can be created according to the CR, as shown in S302 in FIG. 3. Figure 3 Figure 3

[0076] In addition to verifying the collection service in the confidential virtual machine, the number of all services in the confidential virtual machine can also be verified to avoid malicious collection of operation and maintenance data in the confidential virtual machine by unintended services. The remote attestation method based on the trusted execution environment can further include the following two steps:

[0077] Remote attestation is performed on all services in the virtual machine to obtain a remote attestation result.

[0078] According to the remote attestation result and the first information of the registered services in the virtual machine, it is determined whether an unregistered service is deployed in the virtual machine.

[0079] In the present disclosure, all services include various services such as collection services, business services, detection services, remote attestation services, and the like deployed in the confidential virtual machine. All services not only include registered services, but also include unregistered services. The registered services refer to services in the confidential virtual machine that have been officially recorded and managed by the confidential virtual machine. The configuration, running state, and function of these services are known and can be maintained. The unregistered services refer to services in the confidential virtual machine that have not been officially recorded and managed by the confidential virtual machine. These services are not included in the management range and are difficult to manage uniformly.

[0080] ​​In one embodiment, remote attestation can be performed on each of all services in the confidential virtual machine to obtain a remote attestation result, wherein the remote attestation result comprises at least one of a first service identifier of each of all services, a third measurement value of a second image of each of all services, and a third measurement reference value of the second image of each of all services. The first information can comprise a second service identifier of registered services, a fourth measurement value of a third image of the registered services, and a fourth measurement reference value of the third image, wherein the second service identifier of the registered services comprises a service identifier of each of the registered services in the virtual machine, the fourth measurement value of the third image of the registered services comprises a measurement value of an image of each of the registered services in the virtual machine, and the fourth measurement reference value of the third image of the registered services comprises a measurement reference value of the image of each of the registered services in the virtual machine.

[0081] The following describes in detail the specific embodiments of determining whether an unregistered service is deployed in the virtual machine according to the remote attestation result and the first information of the registered services in the virtual machine. Specifically, this can be achieved in various embodiments. In one embodiment, when the remote attestation result comprises a first service identifier of each of all services, and the first information can comprise a second service identifier of registered services, whether an unregistered service is deployed in the virtual machine can be determined by comparing the service identifiers in the remote attestation result and the first information. Specifically, if there is a first service identifier not included in the second service identifier, it is determined that an unregistered service is deployed in the virtual machine, wherein the service corresponding to the first service identifier not included in the second service identifier is the unregistered service; if all first service identifiers are included in the second service identifier, it is determined that no unregistered service is deployed in the virtual machine, i.e., all services deployed in the virtual machine are registered services.

[0082] In another embodiment, when the remote attestation result comprises a third measurement value of each of all services, and the first information can comprise a fourth measurement value of registered services, whether an unregistered service is deployed in the virtual machine can be determined by comparing the measurement values in the remote attestation result and the first information. Specifically, if there is a third measurement value not included in the fourth measurement value, it is determined that an unregistered service is deployed in the virtual machine, wherein the service corresponding to the third measurement value not included in the fourth measurement value is the unregistered service; if all third measurement values are included in the fourth measurement value, it is determined that no unregistered service is deployed in the virtual machine, i.e., all services deployed in the virtual machine are registered services.

[0083] In another implementation, if the remote verification result includes a third metric value for each service among all services, and the first information may include a fourth metric value for registered services, the comparison between the remote verification result and the metric values ​​in the first information can determine whether an unregistered service is deployed in the virtual machine. Specifically, if there is a third metric value not included in the fourth metric value, it is determined that an unregistered service is deployed in the virtual machine, where the service corresponding to the third metric value not in the fourth metric value is the unregistered service; if all third metric values ​​are in the fourth metric value, it is determined that no unregistered service is deployed in the virtual machine, that is, all services deployed in the virtual machine are registered services.

[0084] In addition to verifying the trustworthiness of the data collection service running in a confidential virtual machine to ensure the credibility of the exposed operational data, security enhancement processing can be performed on the operational data before it enters a non-TEE environment. This ensures both the observability of the operational data and the security of the exposed operational data. Specifically, the aforementioned remote verification method based on a trusted execution environment also includes the following two steps:

[0085] Enhance the security of the operation and maintenance data of the first service within the virtual machine;

[0086] The security-enhanced operation and maintenance data is stored in the database.

[0087] like Figure 4 and Figure 5 As shown, the database is deployed in a non-TEE environment. After acquiring the security-enhanced operation and maintenance data through the first data acquisition service, it can be stored in the database in the non-TEE environment for displaying this operation and maintenance data and generating alarm information based on this data. For example, if the CPU utilization of a confidential virtual machine exceeds a preset utilization threshold, a first alarm message will be generated. Security enhancement processing may include noise addition processing, de-identification processing, etc.

[0088] In an implementation, the operation and maintenance data of the first service can be processed for security enhancement by the business code calling the software development kit, so that the operation and maintenance data of the first service is processed for security enhancement before entering the collection service. Specifically, the operation and maintenance data of the first service is a first type of operation and maintenance data generated by the first service in the running process, the first type is any one of logs, events and indicators, the first software development kit (Software Development Kit, SDK) is integrated in the first service, at this time, the above-mentioned processing for security enhancement of the operation and maintenance data of the first service in the virtual machine can include: after the first service obtains the operation and maintenance data, the first SDK is used to process the operation and maintenance data for security enhancement, and the operation and maintenance data processed for security enhancement is sent to the first collection service; the above-mentioned storing the operation and maintenance data processed for security enhancement into the database can include: the first collection service stores the received operation and maintenance data processed for security enhancement into the database. For example Figure 2 S203 and Figure 3 S304 in

[0089] As shown in Figure 4 , after the first service obtains the operation and maintenance data, the first SDK can be used to process the operation and maintenance data for security enhancement, and the operation and maintenance data processed for security enhancement is sent to the first collection service; after the first collection service receives the operation and maintenance data processed for security enhancement, it can be stored in the database deployed in the non-TEE.

[0090] In the above-mentioned first type is an indicator, the first SDK can be used to process the operation and maintenance data for noise addition, at this time, the first SDK can be the noise addition SDK shown in Figure 4 In the above-mentioned first type is a log or an event, the first SDK can be used to process the operation and maintenance data for desensitization, at this time, the first SDK can be the desensitization SDK shown in Figure 4

[0091] ​In another implementation, the operation and maintenance data of the first service can be subjected to security enhancement processing by the SDK integrated in the collection service, so that the operation and maintenance data of the first service is subjected to security enhancement before entering the collection service and leaving the TEE. Specifically, the operation and maintenance data of the first service is of a first type, the first type being any one of a log, an event, and an index, and the first collection service has a second SDK integrated therein; at this time, the security enhancement processing of the operation and maintenance data of the first service in the virtual machine can include: after the first service obtains the operation and maintenance data of the first service, the first service sends the operation and maintenance data of the first service to the first collection service; the first collection service subjects the received operation and maintenance data of the first service to security enhancement processing by a second software development kit. The storage of the operation and maintenance data subjected to security enhancement in the database can include: the first collection service stores the operation and maintenance data subjected to security enhancement in the database.

[0092] As shown in Figure 5 , after the first service obtains the operation and maintenance data, the first service can send the operation and maintenance data to the first collection service; after the first collection service receives the operation and maintenance data, the first collection service can subject the operation and maintenance data to security enhancement processing by a second SDK integrated internally, and store the operation and maintenance data subjected to security enhancement in the database in the non-TEE.

[0093] In the above case where the first type is an index, the second SDK can be used to subject the operation and maintenance data to noise addition processing, at this time, the second SDK can be a noise addition SDK as shown in Figure 5 ; in the above case where the first type is a log or an event, the second SDK can be used to subject the operation and maintenance data to desensitization processing, at this time, the second SDK can be a desensitization SDK as shown in Figure 5 .

[0094] Figure 6 is a block diagram of a remote attestation apparatus based on a trusted execution environment according to an exemplary embodiment. As shown in Figure 6 , the remote attestation apparatus based on a trusted execution environment 400 includes:

[0095] a receiving module 401 configured to receive a remote attestation request for a first collection service; wherein the first collection service is deployed in a virtual machine in a trusted execution environment;

[0096] a first obtaining module 402 configured to obtain a first measurement value of a first collection rule loaded by the first collection service, and obtain a first measurement reference value of a configuration collection rule of the first collection service; wherein the configuration collection rule is a collection rule pre-configured for the first collection service, and the first collection service is configured to collect operation and maintenance data of a first service in the virtual machine based on the first collection rule;

[0097] The first remote attestation module 403 is configured to perform remote attestation on the first collection rule according to the first measurement value and the first measurement reference value, to determine whether the first collection service is trustworthy.

[0098] In the above technical solution, a remote attestation request for the first collection service is received, wherein the first collection service is deployed in a virtual machine (i.e., a confidential virtual machine) in a trusted execution environment; then, a first measurement value of a first collection rule loaded by the first collection service and a first measurement reference value of a configuration collection rule of the first collection service are obtained, the first collection service being configured to collect operation and maintenance data of a first service in the virtual machine based on the first collection rule; finally, remote attestation is performed on the first collection rule according to the first measurement value and the first measurement reference value, to determine whether the first collection service is trustworthy. In this way, the remote attestation technology can be combined to verify the trustworthiness of the collection service for collecting the operation and maintenance data of the first service, to prove that the collection service running in the confidential virtual machine is trustworthy, thereby ensuring the trustworthiness of the exposed operation and maintenance data.

[0099] Optionally, the remote attestation apparatus based on the trusted execution environment 400 further includes:

[0100] A first detection module is configured to detect, by a detection service, whether the configuration collection rule is created, wherein the detection service is deployed in the virtual machine.

[0101] A first measurement module is configured to measure the first collection rule to obtain the first measurement value, in a case where the detection service detects that the configuration collection rule is created.

[0102] Optionally, the remote attestation apparatus based on the trusted execution environment 400 further includes:

[0103] A second detection module is configured to detect, by the detection service, whether the configuration collection rule is updated.

[0104] The first measurement module is further configured to, in a case where the detection service detects that the configuration collection rule is updated, re-measure the first collection rule loaded by the first collection service to obtain a new first measurement value, and determine a new first measurement reference value corresponding to the updated configuration collection rule.

[0105] An updating module is configured to update the first measurement value to the new first measurement value, and update the first measurement reference value to the new first measurement reference value.

[0106] Optionally, the remote attestation apparatus based on the trusted execution environment 400 further includes:

[0107] a second remote attestation module, configured to perform remote attestation on the detection service to verify the trustworthiness of the detection service.

[0108] Optionally, the remote attestation apparatus 400 based on the trusted execution environment further includes:

[0109] a second acquisition module, configured to acquire a second measurement value and a second measurement reference value of a first image of the first collection service;

[0110] a third remote attestation module, configured to perform remote attestation on the first image according to the second measurement value and the second measurement reference value to determine whether the first collection service is trustworthy.

[0111] Optionally, the remote attestation apparatus 400 based on the trusted execution environment further includes:

[0112] a fourth remote attestation module, configured to perform remote attestation on all services in the virtual machine to obtain a remote attestation result; the remote attestation result includes at least one of a first service identifier of each service in the all services, a third measurement value of a second image of each service in the all services, and a third measurement reference value of the second image of each service in the all services;

[0113] a determination module, configured to determine whether an unregistered service is deployed in the virtual machine according to the remote attestation result and first information of registered services in the virtual machine; the first information includes at least one of a second service identifier of the registered services, a fourth measurement value of a third image of the registered services, and a fourth measurement reference value of the third image.

[0114] Optionally, the determination module includes any one of the following:

[0115] a first determination sub-module, configured to determine that an unregistered service is deployed in the virtual machine if there is the first service identifier not included in the second service identifier;

[0116] a second determination sub-module, configured to determine that an unregistered service is deployed in the virtual machine if there is the third measurement value not included in the fourth measurement value;

[0117] a third determination sub-module, configured to determine that an unregistered service is deployed in the virtual machine if there is the third measurement reference value not included in the fourth measurement reference value.

[0118] Optionally, the remote attestation apparatus 400 based on the trusted execution environment further includes:

[0119] a security enhancement module, configured to perform security enhancement processing on the operation and maintenance data in the virtual machine.

[0120] a storage module, configured to store the operation and maintenance data after security enhancement into a database, wherein the database is deployed in an untrusted execution environment.

[0121] Optionally, the operation and maintenance data is first type operation and maintenance data generated by the first service during running, the first type is any one of logs, events and indicators, and the first service is integrated with a first software development kit.

[0122] The security enhancement module is configured to perform security enhancement on the operation and maintenance data through the first software development kit after the first service acquires the operation and maintenance data, and send the operation and maintenance data after security enhancement to the first collection service.

[0123] The storage module is configured to store the operation and maintenance data after security enhancement received by the first collection service into the database.

[0124] Optionally, when the first type is the indicators, the first software development kit is configured to perform noise addition on the operation and maintenance data.

[0125] When the first type is the logs or the events, the first software development kit is configured to perform desensitization on the operation and maintenance data.

[0126] Optionally, the operation and maintenance data is first type operation and maintenance data generated by the first service during running, the first type is any one of logs, events and indicators, and the first collection service is integrated with a second software development kit.

[0127] The security enhancement module comprises:

[0128] A sending sub-module, configured to send the operation and maintenance data to the first collection service after the first service acquires the operation and maintenance data.

[0129] A security enhancement sub-module, configured to perform security enhancement on the operation and maintenance data received by the first collection service through the second software development kit.

[0130] The storage module is configured to store the operation and maintenance data after security enhancement into the database.

[0131] Optionally, when the first type is the indicators, the second software development kit is configured to perform noise addition on the operation and maintenance data.

[0132] When the first type is the logs or the events, the second software development kit is configured to perform desensitization on the operation and maintenance data.

[0133] The present disclosure also provides a computer readable medium having stored thereon a computer program which, when executed by a processing apparatus, implements the steps of the above-mentioned remote attestation method based on a trusted execution environment provided by the present disclosure.

[0134] The present disclosure also provides a computer program product comprising a computer program which, when executed by a processor, implements the steps of the above-mentioned remote attestation method based on a trusted execution environment provided by the present disclosure.

[0135] Reference is made below to Figure 7 , which shows a structural diagram of an electronic device (e.g., a terminal device or a server) 600 suitable for use in implementing embodiments of the present disclosure. The terminal device in embodiments of the present disclosure can include, but is not limited to, mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablets), PMPs (portable multimedia players), in-vehicle terminals (e.g., in-vehicle navigation terminals), and the like, as well as stationary terminals such as digital TVs, desktop computers, and the like. Figure 7 The electronic device shown is merely an example and should not impose any limitation on the functions and scope of use of embodiments of the present disclosure.

[0136] As shown in Figure 7 , the electronic device 600 can include a processing apparatus (e.g., a central processing unit, a graphics processing unit, or the like) 601, which can perform various appropriate actions and processes in accordance with programs stored in a read-only memory (ROM) 602 or loaded from a storage device 608 into a random access memory (RAM) 603. Various programs and data required for operation of the electronic device 600 are also stored in the RAM 603. The processing apparatus 601, the ROM 602, and the RAM 603 are connected to each other through a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0137] In general, the following devices can be connected to the I / O interface 605: input devices 606 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, and the like; output devices 607 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, and the like; storage devices 608 including, for example, a magnetic tape, a hard disk, and the like; and communication devices 609. The communication devices 609 can allow the electronic device 600 to communicate wirelessly or via a wire with other devices to exchange data. Although Figure 7 The electronic device 600 is shown with various devices, but it should be understood that all of the shown devices are not required to implement or be present. More or fewer devices can alternatively be implemented or present.

[0138] In particular, the processes described above with reference to the flowcharts can be implemented as a computer software program in accordance with embodiments of the present disclosure. For example, embodiments of the present disclosure include a computer program product comprising a computer program carried on a non-transitory computer-readable medium, the computer program comprising program code for executing the methods illustrated by the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via the communication device 609, or installed from the storage device 608, or installed from the ROM 602. When the computer program is executed by the processing device 601, the above-mentioned functions defined in the methods of the embodiments of the present disclosure are performed.

[0139] It should be noted that the computer-readable medium described above in the present disclosure can be a computer-readable signal medium or a computer-readable storage medium or any combination thereof. The computer-readable storage medium can be, for example but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or apparatus, or any suitable combination thereof. More specific examples of the computer-readable storage medium can include, but are not limited to, an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, the computer-readable storage medium can be any tangible medium that contains or stores a program used by or in connection with an instruction execution system, apparatus, or device. In the present disclosure, the computer-readable signal medium can include a data signal propagated in baseband or propagated as a carrier wave in a propagated data signal, in which the computer-readable program code is carried. Such a propagated data signal can take a variety of forms, including but not limited to electro-magnetic, optical, or any suitable combination thereof. The computer-readable signal medium can also be any computer-readable medium that can be used to carry or store program code for use by or in connection with an instruction execution system, apparatus, or device. The program code contained in the computer-readable medium can be transmitted by any suitable medium, including but not limited to wire, cable, RF (radio frequency), or any suitable combination thereof.

[0140] In some embodiments, the client, server, or other computing machines utilized by the embodiments can communicate using any known or later developed form of computer readable media, including but not limited to wireless media (e.g., radio frequency, microwave, infrared, etc.), wired media (e.g., wire, cable, etc.), computer memory (e.g., random access memory, read only memory, etc.), and the like. In some embodiments, the client, server, or other computing machines utilized by the embodiments can communicate using any current known or later developed network protocol, such as the HyperText Transfer Protocol (HTTP), the Simple Mail Transfer Protocol (SMTP), the Internet Message Access Protocol (IMAP), the Network File System (NFS), the Network File System (NFS), the File Transfer Protocol (FTP), the Wireless Application Protocol (WAP), the Session Initiation Protocol (SIP), the Internet Protocol (IP), the Transmission Control Protocol (TCP), the User Datagram Protocol (UDP), the Internet Control Message Protocol (ICMP), the Dynamic Host Configuration Protocol (DHCP), the Domain Name System (DNS), the Hypertext Transfer Protocol Secure (HTTPS), and the like. In some embodiments, the client, server, or other computing machines utilized by the embodiments can be interconnected through any form or medium of digital data communication (e.g., a communication network) including any present or future developed form of local area network ("LAN"), wide area network ("WAN"), inter-network (e.g., the Internet), and peer-to-peer network (e.g., ad hoc peer-to-peer network), and the like.

[0141] The computer readable medium described above can be included in the electronic device described above; alternatively, the computer readable medium can exist as a separate entity, which is not incorporated in the electronic device.

[0142] The computer readable medium described above can be included in the electronic device described above; alternatively, the computer readable medium can exist as a separate entity, which is not incorporated in the electronic device.

[0143] Computer program code for carrying out operations of the present disclosure can be written in any of one or more programming languages, including but not limited to object oriented programming languages such as Java, Smalltalk, C++, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network ("LAN") or a wide area network ("WAN"), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

[0144] The computer program product of the first aspect can include one or more non-transitory computer-readable media storing instructions that, when executed, cause one or more processors to perform the operations of the first aspect. The one or more non-transitory computer-readable media can include, for example, Blu-ray discs, DVDs, CD-ROMs, flash memory, volatile memory, non-volatile memory, or a suitable combination of different computer-readable media.

[0145] The modules involved in the embodiments of the present disclosure can be implemented in the form of software or in the form of hardware. In some cases, the name of a module does not constitute a limitation on the module itself. For example, a receiving module can also be described as a module that receives a remote attestation request for a first collection service.

[0146] The functions described above in the present disclosure can be performed at least in part by one or more hardware logic components. For example, non-limiting examples of exemplary types of hardware logic components that can be used include field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), system-on-a-chip (SOCs), complex programmable logic devices (CPLDs), etc.

[0147] In the context of the present disclosure, a machine-readable medium can be a tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. Machine-readable storage media can include, without limitation, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media can include one or more lines of electrical wire, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or Flash memory), optical fiber, portable compact disc read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0148] According to one or more embodiments of the present disclosure, example 1 provides a remote attestation method based on a trusted execution environment, comprising:

[0149] receiving a remote attestation request for a first collection service; wherein the first collection service is deployed in a virtual machine in a trusted execution environment;

[0150] obtaining a first metric value of a first collection rule loaded by the first collection service, and obtaining a first metric benchmark value of a configuration collection rule of the first collection service; wherein the configuration collection rule is a collection rule pre-configured for the first collection service, and the first collection service is used to collect operation and maintenance data of a first service in the virtual machine based on the first collection rule;

[0151] attesting the first collection rule based on the first metric value and the first metric benchmark value to determine whether the first collection service is trustworthy.

[0152] According to one or more embodiments of the present disclosure, example 2 provides the method of example 1, further comprising:

[0153] detecting whether the configuration collection rule is created by a detection service, wherein the detection service is deployed in the virtual machine;

[0154] In the case where the detection service detects that the configuration collection rule is created, the first collection rule is measured to obtain the first metric value.

[0155] According to one or more embodiments of the present disclosure, example 3 provides the method of example 2, further comprising:

[0156] detecting whether the configuration collection rule is updated by the detection service;

[0157] In the case where the detection service detects that the configuration collection rule is updated, the first collection rule loaded by the first collection service is re-measured to obtain a new first metric value, and a new first metric benchmark value corresponding to the updated configuration collection rule is determined;

[0158] the first metric value is updated to the new first metric value, and the first metric benchmark value is updated to the new first metric benchmark value.

[0159] According to one or more embodiments of the present disclosure, example 4 provides the method of example 2, further comprising:

[0160] attesting the detection service to verify the trustworthiness of the detection service.

[0161] According to one or more embodiments of the present disclosure, example 5 provides the method of example 1, the method further comprising:

[0162] obtaining a second metric value and a second metric reference value of a second image of the first collection service;

[0163] performing remote attestation on the first image according to the second metric value and the second metric reference value to determine whether the first collection service is trustworthy.

[0164] According to one or more embodiments of the present disclosure, example 6 provides the method of any one of examples 1-5, the method further comprising:

[0165] performing remote attestation on all services in the virtual machine to obtain a remote attestation result; wherein the remote attestation result comprises at least one of a first service identifier of each service in the all services, a third metric value of a second image of each service in the all services, and a third metric reference value of the second image of each service in the all services;

[0166] determining whether an unregistered service is deployed in the virtual machine according to the remote attestation result and first information of registered services in the virtual machine; the first information comprises at least one of a second service identifier of the registered services, a fourth metric value of a third image of the registered services, and a fourth metric reference value of the third image.

[0167] According to one or more embodiments of the present disclosure, example 7 provides the method of example 6, wherein determining whether an unregistered service is deployed in the virtual machine according to the remote attestation result and first information of registered services in the virtual machine comprises any one of:

[0168] if the first service identifier not included in the second service identifier exists, determining that an unregistered service is deployed in the virtual machine;

[0169] if the third metric value not included in the fourth metric value exists, determining that an unregistered service is deployed in the virtual machine;

[0170] if the third metric reference value not included in the fourth metric reference value exists, determining that an unregistered service is deployed in the virtual machine.

[0171] According to one or more embodiments of the present disclosure, example 8 provides the method of any one of examples 1-5, the method further comprising:

[0172] performing security enhancement processing on the operation and maintenance data in the virtual machine;

[0173] The operation and maintenance data after the security enhancement processing is stored into a database, wherein the database is deployed in an untrusted execution environment.

[0174] According to one or more embodiments of the present disclosure, example 9 provides the method of example 8, the operation and maintenance data is a first type of operation and maintenance data generated by the first service in the running process, wherein the first type is any one of logs, events and indicators, and the first software development kit is integrated into the first service;

[0175] The security enhancement processing of the operation and maintenance data in the virtual machine includes:

[0176] After obtaining the operation and maintenance data, the first service performs security enhancement processing on the operation and maintenance data through the first software development kit, and sends the operation and maintenance data after the security enhancement processing to the first collection service;

[0177] The operation and maintenance data after the security enhancement processing is stored into a database, wherein the database is deployed in an untrusted execution environment.

[0178] The first collection service stores the received operation and maintenance data after the security enhancement processing into the database.

[0179] According to one or more embodiments of the present disclosure, example 10 provides the method of example 9, when the first type is the indicator, the first software development kit is used for noise processing on the operation and maintenance data;

[0180] When the first type is the log or the event, the first software development kit is used for desensitization processing on the operation and maintenance data.

[0181] According to one or more embodiments of the present disclosure, example 11 provides the method of example 8, the operation and maintenance data is a first type of operation and maintenance data generated by the first service in the running process, wherein the first type is any one of logs, events and indicators, and the second software development kit is integrated into the first collection service;

[0182] The security enhancement processing of the operation and maintenance data in the virtual machine includes:

[0183] After obtaining the operation and maintenance data, the first service sends the operation and maintenance data to the first collection service;

[0184] The first collection service performs security enhancement processing on the received operation and maintenance data through the second software development kit;

[0185] The operation and maintenance data after the security enhancement processing is stored into a database, wherein the database is deployed in an untrusted execution environment.

[0186] The first collection service stores the security-enhanced operation and maintenance data into the database.

[0187] According to one or more embodiments of the present disclosure, example 12 provides the method of example 11, when the first type is the metric, the second software development kit is configured to perform noise addition on the operation and maintenance data.

[0188] When the first type is the log or the event, the second software development kit is configured to perform desensitization on the operation and maintenance data.

[0189] According to one or more embodiments of the present disclosure, example 13 provides a remote attestation apparatus based on a trusted execution environment, comprising:

[0190] A receiving module is configured to receive a remote attestation request for a first collection service; wherein the first collection service is deployed in a virtual machine in a trusted execution environment;

[0191] A first obtaining module is configured to obtain a first metric value of a first collection rule loaded by the first collection service, and obtain a first metric benchmark value of a configuration collection rule of the first collection service; wherein the configuration collection rule is a collection rule pre-configured for the first collection service, and the first collection service is configured to collect operation and maintenance data of a first service in the virtual machine based on the first collection rule;

[0192] A first remote attestation module is configured to perform remote attestation on the first collection rule based on the first metric value and the first metric benchmark value, to determine whether the first collection service is trustworthy.

[0193] According to one or more embodiments of the present disclosure, example 14 provides a computer readable medium having stored thereon a computer program, which, when executed by a processing apparatus, implements the steps of the method of any one of examples 1-12.

[0194] According to one or more embodiments of the present disclosure, example 15 provides an electronic device, comprising:

[0195] A storage device having stored thereon a computer program;

[0196] A processing apparatus configured to execute the computer program in the storage device to implement the steps of the method of any one of examples 1-12.

[0197] According to one or more embodiments of the present disclosure, example 16 provides a computer program product comprising a computer program which, when executed by a processor, implements the steps of the method of any one of examples 1-12.

[0198] The above description is only preferred embodiments of the present disclosure and a description of the principles of the technology used. Those skilled in the art should understand that the disclosed scope of the present disclosure is not limited to the technical solutions formed by the specific combinations of the above technical features, and should also cover other technical solutions formed by the combinations of the above technical features or their equivalent features without departing from the above disclosed concept. For example, the technical solutions formed by the mutual replacement of the above features and the technical features disclosed in the present disclosure (but not limited to) having similar functions.

[0199] In addition, although each operation is described in a particular order, this should not be understood as requiring the operations to be performed in the specific order shown or in a sequential order. In certain circumstances, multitasking and parallel processing can be advantageous. Similarly, although several implementation details are included in the above discussion, these should not be interpreted as limiting the scope of the present disclosure. Certain features described in the context of separate embodiments can also be combined in a single embodiment. Conversely, various features described in the context of a single embodiment can also be implemented separately or in any suitable subcombination.

[0200] Although the subject matter has been described in language specific to structural features and / or methodological acts, it is to be understood that the subject defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are merely illustrative of the example forms of implementing the claims. As to the means of implementing the device in the above-described embodiments, the specific manner in which the various modules perform operations has been described in detail in the embodiments related to the method, and will not be described here.

Claims

1. A remote proof method based on a trusted execution environment, characterized in that, include: Receive a remote authentication request for the first collection service; wherein the first collection service is deployed in a virtual machine in a trusted execution environment; The hash value of the first collection rule loaded by the first collection service is obtained as the first metric value, and the hash value of the configuration collection rule of the first collection service is obtained as the first metric baseline value; wherein, the configuration collection rule is a collection rule pre-configured for the first collection service, and the first collection service is used to collect the operation and maintenance data of the first service in the virtual machine based on the first collection rule; A consistency comparison is performed between the first metric value and the first metric benchmark value to remotely verify the first collection rule, thereby determining whether the first collection rule is trustworthy, and determining whether the first collection service is trustworthy based on whether the first collection rule is trustworthy.

2. The method according to claim 1, characterized in that, The method further includes: The detection service checks whether the configuration collection rule has been created, wherein the detection service is deployed in the virtual machine; When the detection service detects the creation of the configured collection rule, it measures the first collection rule to obtain the first measurement value.

3. The method according to claim 2, characterized in that, The method further includes: The detection service is used to check whether the configuration collection rules have been updated. When the detection service detects that the configuration collection rule has been updated, the first collection rule loaded by the first collection service is re-measured to obtain a new first measurement value, and a new first measurement benchmark value corresponding to the updated configuration collection rule is determined. The first metric value is updated to the new first metric value, and the first metric benchmark value is updated to the new first metric benchmark value.

4. The method according to claim 2, characterized in that, The method further includes: The detection service is remotely certified to verify its credibility.

5. The method according to claim 1, characterized in that, The method further includes: Obtain the second metric value and the second metric baseline value of the first image of the first acquisition service; Based on the second metric value and the second metric benchmark value, the first image is remotely verified to determine whether the first acquisition service is trustworthy.

6. The method according to any one of claims 1-5, characterized in that, The method further includes: Remote verification is performed on all services in the virtual machine to obtain remote verification results; wherein, the remote verification results include at least one of the following: a first service identifier of each service, a third metric value of the second image of each service, and a third metric baseline value of the second image of each service. Based on the remote verification result and the first information of the registered services in the virtual machine, it is determined whether there are any unregistered services deployed in the virtual machine; the first information includes at least one of the second service identifier of the registered service, the fourth metric value of the third image of the registered service, and the fourth metric baseline value of the third image.

7. The method according to claim 6, characterized in that, The determination of whether an unregistered service is deployed in the virtual machine based on the remote verification result and the first information of the registered services in the virtual machine includes any of the following: If there is a first service identifier that is not included in the second service identifier, then it is determined that an unregistered service is deployed in the virtual machine; If there is a third metric that is not included in the fourth metric, then it is determined that an unregistered service is deployed in the virtual machine; If there is a third metric value that is not included in the fourth metric value, then it is determined that an unregistered service is deployed in the virtual machine.

8. The method according to any one of claims 1-5, characterized in that, The method further includes: The operation and maintenance data is subjected to security enhancement processing within the virtual machine; The security-enhanced operation and maintenance data is stored in a database; wherein the database is deployed in an untrusted execution environment.

9. The method according to claim 8, characterized in that, The operation and maintenance data is the first type of operation and maintenance data generated during the operation of the first service, wherein the first type is any one of logs, events and metrics, and the first service integrates a first software development kit. The security enhancement processing of the operation and maintenance data in the virtual machine includes: After obtaining the operation and maintenance data, the first service performs security enhancement processing on the operation and maintenance data using the first software development kit, and then sends the security-enhanced operation and maintenance data to the first collection service. The step of storing the security-enhanced operation and maintenance data into the database includes: The first data collection service stores the security-enhanced operation and maintenance data it receives into the database.

10. The method according to claim 9, characterized in that, When the first type is the aforementioned indicator, the first software development kit is used to add noise to the operation and maintenance data. When the first type is the log or the event, the first software development kit is used to de-identify the operation and maintenance data.

11. The method according to claim 8, characterized in that, The operation and maintenance data is the first type of operation and maintenance data generated during the operation of the first service. The first type is any one of logs, events and metrics. The first collection service integrates a second software development kit. The security enhancement processing of the operation and maintenance data in the virtual machine includes: After obtaining the operation and maintenance data, the first service sends the operation and maintenance data to the first collection service; The first data acquisition service performs security enhancement processing on the received operation and maintenance data using the second software development kit; The step of storing the security-enhanced operation and maintenance data into the database includes: The first data collection service stores the security-enhanced operation and maintenance data into the database.

12. The method according to claim 11, characterized in that, When the first type is the aforementioned indicator, the second software development kit is used to add noise to the operation and maintenance data. When the first type is the log or the event, the second software development kit is used to de-identify the operation and maintenance data.

13. A remote verification device based on a trusted execution environment, characterized in that, include: A receiving module is used to receive remote authentication requests for the first collection service; wherein the first collection service is deployed in a virtual machine in a trusted execution environment; The first acquisition module is used to acquire the hash value of the first acquisition rule loaded by the first acquisition service as a first metric value, and to acquire the hash value of the configuration acquisition rule of the first acquisition service as a first metric baseline value; wherein, the configuration acquisition rule is an acquisition rule pre-configured for the first acquisition service, and the first acquisition service is used to acquire the operation and maintenance data of the first service in the virtual machine based on the first acquisition rule; The first remote verification module is used to perform a consistency comparison between the first metric value and the first metric benchmark value, remotely verify the first collection rule, determine whether the first collection rule is trustworthy, and determine whether the first collection service is trustworthy based on whether the first collection rule is trustworthy.

14. A computer-readable medium having a computer program stored thereon, characterized in that, When executed by a processing device, the computer program performs the steps of the method described in any one of claims 1-12.

15. An electronic device, characterized in that, include: A storage device on which computer programs are stored; A processing device for executing the computer program in the storage device to implement the steps of the method according to any one of claims 1-12.

16. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1-12.

Images