Implementation system for multi-application authorization password based on trusted device hierachy

Abstract

The invention relates to an implementation system based on trusted equipment hierachy multi-application authorization passwords, which comprises an interface service module, a hierachy authorization management program, a trusted equipment management service module and a hierachy authorization password ciphertext storage module, and is characterized in that the interface service module is used for providing application program authorization passwords to realize service calling of the trusted equipment hierachy multi-application authorization passwords; the hierachy authorization management program is used for realizing management on a hierachy authorization password of the trusted equipment; and the trusted device management service module is used for obtaining a hierachy authorization password of the trusted device. According to the method and the device, the problem of misuse of the hierachy authorization password caused by the fact that the permission verification passwords among the applications are the same when a plurality of applications obtain the hierachy authorization can be solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of trusted security technology, in particular to a system for implementing multi-application authorization password based on trusted device hierarchy. BACKGROUND

[0002] A trusted platform module (TPM) is a secure co-processor with cryptographic algorithm capabilities, which provides a protected cryptographic engine, secure key management, platform integrity measurement, storage and reporting, hierarchical structure and access control.

[0003] A trusted cryptography module (TCM) is a secure chip standard for trusted computing independently developed by China, which is functionally benchmarked against the international TPM and has the functions of a protected cryptographic engine, secure key management, platform integrity measurement, storage and reporting, hierarchical structure and access control.

[0004] TPM 2.0 / TCM2.0 uses multiple independent hierarchies (such as platform hierarchy, owner hierarchy, endorsement hierarchy) to isolate and manage keys and data for different purposes.

[0005] The hierarchy authorization password is an independent authorization mechanism for each hierarchy, which realizes fine-grained permission control.

[0006] The trusted device hierarchy can only set one authorization password, and the same authorization password is used for authorization when multiple applications obtain the use right of the hierarchy. If the hierarchy authorization data is leaked, a malicious user can use the hierarchy authorization password to modify the keys and data under the hierarchy at will. Figure 1 As shown in the figure: after the trusted device sets the hierarchy authorization password, if user 1 has the right to execute application 1, user 2 has the right to execute application 2 and application 3, and application 1 and 2 and 3 create NV indexes on the same hierarchy, when user 2 knows the hierarchy authorization password, can maliciously delete the NV index space created by application 1 and re-initialize, causing data tampering. SUMMARY

[0007] To solve the problems in the prior art, the present application provides a system for implementing multi-application authorization password based on trusted device hierarchy, which comprises an interface service module, a hierarchy authorization management program, a trusted device management service module and a hierarchy authorization password ciphertext storage module, wherein, The interface service module is connected with the trusted device management service module, faces different application programs, provides application program authorization passwords through the unique id of the application program, realizes service calling of the trusted device hierarchy multi-authorization password, and makes different application programs obtain unique trusted device hierarchy authorization passwords through different application program authorization passwords. The hierarchy authorization management program is connected with the trusted device management service module, receives the administrator authorization password input by the authorization administrator and / or the application program authorization password transmitted by the interface service module to the trusted device management service module, and realizes management of the trusted device hierarchy authorization password, thereby generating the trusted device hierarchy authorization password encrypted by the administrator authorization password, generating or destroying the ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password, and storing the generated ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password in the hierarchy authorization password ciphertext storage module. The trusted device management service module is connected with the interface service module and the hierarchy authorization password ciphertext storage module, decrypts the ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password based on the application program authorization password received by the interface service module, and obtains the trusted device hierarchy authorization password.

[0008] The trusted device management service module, the trusted software stack, and the trusted device are sequentially connected. When an application program needs to access the trusted device, the trusted device management service module finds the application program authorization password based on the unique id value of the application program, decrypts the ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password stored in the hierarchy authorization password ciphertext storage module through the application program authorization password, obtains the trusted device hierarchy authorization password, performs authentication based on the plaintext of the trusted device hierarchy authorization password, and determines the operation permission of the application program on the trusted device.

[0009] The hierarchy authorization management program manages the trusted device hierarchy authorization password, and generating the trusted device hierarchy authorization password encrypted by the administrator authorization password includes the following steps. Step S11: input the administrator authorization password. Step S12: call the trusted device to generate a random number, and use the generated random number as the trusted device hierarchy authorization password. Step S13: encrypt the trusted device hierarchy authorization password using the administrator authorization password. Step S14: Calculate the unique id of the hierarchy authorization manager; Step S15: Obtain the trusted device hierarchy authorization password encrypted by the administrator authorization password with the unique id of the hierarchy authorization manager as the index.

[0010] The management of the trusted device hierarchy authorization password by the hierarchy authorization manager further includes canceling the setting of the trusted device hierarchy authorization password.

[0011] The canceling of the setting of the trusted device hierarchy authorization password by the hierarchy authorization manager includes: Step S21: Input the administrator authorization password; Step S22: Decrypt the trusted device hierarchy authorization password by using the administrator authorization password; Step S23: Cancel the setting of the trusted device hierarchy authorization password; Step S24: Delete the trusted device hierarchy authorization password encrypted by the application authorization password.

[0012] The generation of the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password by the hierarchy authorization manager includes: Step S31: Input the administrator authorization password; Step S32: Decrypt the trusted device hierarchy authorization password encrypted by the administrator authorization password generated by the hierarchy authorization manager by using the administrator authorization password to obtain the decrypted trusted device hierarchy authorization password; Step S33: Set the application authorization password; Step S34: Encrypt the trusted device hierarchy authorization password by using the application authorization password; Step S35: Calculate the unique id of the application; Step S36: Obtain the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password with the unique id of the application as the index.

[0013] In the step S35, the unique id of the application is calculated by using a hash algorithm.

[0014] The destruction of the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password by the hierarchy authorization manager includes: Step S41: Input the administrator authorization password; Step S42: decrypt the trusted device hierarchy authorization password encrypted by the administrator authorization password of the hierarchy authorization management program to obtain the decrypted trusted device hierarchy authorization password; Step S43: input the application authorization password; Step S44: use the application authorization password to decrypt the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password to obtain the decrypted trusted device hierarchy authorization password; Step S45: determine whether the trusted device hierarchy authorization passwords decrypted in steps S42 and S44 are consistent: if not consistent, do not destroy; if consistent, destroy the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password.

[0015] The hierarchy authorization password ciphertext storage module is arranged in the TEE secure memory or the encryption card device.

[0016] The ciphertext storage format of the trusted device hierarchy authorization password encrypted by the application authorization password is set to a 32-byte program hash value plus a 16-byte SM4-encrypted authorization password ciphertext.

[0017] The application can solve the problem that multiple applications obtain the same hierarchy authorization password, which leads to the abuse of the hierarchy authorization password. BRIEF DESCRIPTION OF DRAWINGS

[0018] Figure 1 : Multiple application programs use the same hierarchy authorization password to tamper with NV index data under the hierarchy; Figure 2 : Mind map of the application; Figure 3 : Logic architecture diagram of the implementation system of the application based on the trusted device hierarchy multi-application authorization password; Figure 4 : Implementation flowchart of the hierarchy authorization management program receiving the initialization administrator authorization password to generate the administrator authorization password encrypted trusted device hierarchy authorization password of the application; Figure 5 : Implementation flowchart of the hierarchy authorization management program canceling the trusted device hierarchy authorization password of the application; Figure 6The flowchart of the implementation of the hierarchy authorization management program of the present invention to generate encrypted trusted device hierarchy authorization passwords for application authorization passwords; Figure 7 The flowchart illustrates the implementation of the hierarchy authorization management program of this invention to destroy the encrypted trusted device hierarchy authorization password of the application authorization password. Detailed Implementation

[0019] To gain a better understanding of the technical solution and beneficial effects of the present invention, the technical solution of the present invention and its beneficial effects are described in detail below with reference to the accompanying drawings.

[0020] In this invention, the terminology used and its interpretation are as follows: TPM: Trusted Platform Module; TCM: Trusted Cryptography Module; Trusted devices: refer to the Trusted Platform Module (TPM) and the Trusted Cryptography Module (TCM). Hierarchy: Refers to a collection of interconnected entities managed as a whole. These entities include permanent objects (i.e., hierarchy handles), the master object at the root of the tree structure, and other objects in the tree (such as keys). NV indexes belong to a hierarchy but are not within the tree structure. Except for permanent entities, all other entities can be cleared as a whole.

[0021] This invention proposes a method based on trusted device hierarchy multi-authorization passwords. When using hierarchy authorization across different applications, each application has its own unique authorization password for hierarchy authorization verification, ensuring isolation of authorization verification between different applications and preventing password abuse. The design concept of this invention is as follows: Figure 2 As shown, when using the same key to unlock, the right to use this key is abstracted into N different keys to obtain that right. These N different keys correspond to opening N different boxes and retrieving the keys to unlock them. The N different keys can correspond to N different application authorization passwords, the key obtained from opening a box can correspond to a unique hierarchy authorization password, and the unlocking process corresponds to using the hierarchy authorization password to perform hierarchy authorization verification on a trusted device.

[0022] likeFigure 3 As shown, the implementation system of the application based on the trusted device hierarchy multi-application authorization password includes an interface service module, a hierarchy authorization management program, a trusted device management service module, a hierarchy authorization password ciphertext storage module, a trusted software stack, and a trusted device. The functions and roles of each module are described as follows.

[0023] I. Interface service module The interface service module is connected with the trusted device management service module. It faces different application programs and provides application authorization passwords through the unique id of the application program to realize the service call of the trusted device hierarchy multi-authorization password, so that different application programs obtain unique trusted device hierarchy authorization passwords through different application authorization passwords.

[0024] The interface service module includes an external call interface, interface function processing, and interface protocol transmission. The external call interface function mainly manages the hierarchy authorization password part of the trusted execution command to achieve external service call based on the trusted device hierarchy multi-authorization password.

[0025] II. Hierarchy authorization management program The hierarchy authorization management program is connected with the trusted device management service module. It completes the execution of the management function and the interface protocol transmission by calling the trusted device management service module. Specifically, it receives the administrator authorization password input by the authorization administrator and / or the application authorization password transmitted by the interface service module to the trusted device management service module, and implements the management of the trusted device hierarchy authorization password, thereby generating the administrator authorization password encrypted trusted device hierarchy authorization password, destroying the trusted device hierarchy authorization password, generating or destroying the ciphertext of the application authorization password encrypted trusted device hierarchy authorization password. The generated ciphertext of the application authorization password encrypted trusted device hierarchy authorization password (such as Figure 3 As shown, the "password 0 encrypted trusted device hierarchy authorization password ciphertext, password 1 encrypted trusted device hierarchy authorization password ciphertext, …, password N encrypted trusted device hierarchy authorization password ciphertext" is stored in the hierarchy authorization password ciphertext storage module. 1. Initial administrator authorization password encrypted trusted device hierarchy authorization password As shown in Figure 4 The process of the hierarchy authorization management program receiving the initialization administrator authorization password to generate the administrator authorization password encrypted trusted device hierarchy authorization password includes: 1-1, enter initialization operation, determine whether the current hierarchy is set authorized password, if yes, exit initial setting, if not, execute 1-2; 1-2, input administrator authorized password; 1-3, call trusted device to generate random number, use the generated random number as trusted device hierarchy authorized password; 1-4, use administrator authorized password to encrypt trusted device hierarchy authorized password; 1-5, calculate the unique id of hierarchy authorization management program; 1-6, use the unique id of hierarchy authorization management program as index to get administrator authorized password encrypted trusted device hierarchy authorized password.2, cancel trusted device hierarchy authorized password As Figure 5 shown, the process of hierarchy authorization management program canceling trusted device hierarchy authorized password includes: 2-1, enter initialization operation, determine whether the current hierarchy is set authorized password, if yes, exit initial setting, if not, execute 2-2; 2-2, input administrator authorized password; 2-3, use administrator authorized password to decrypt trusted device hierarchy authorized password; 2-4, cancel the setting of trusted device hierarchy authorized password; 2-5, delete application program authorized password encrypted trusted device hierarchy authorized password.

[0026] 3, generate application program authorized password encrypted trusted device hierarchy authorized password ciphertext As Figure 6 shown, the process of hierarchy authorization management program generating application program authorized password encrypted trusted device hierarchy authorized password ciphertext includes: 3-1, enter generation operation, determine whether the current hierarchy is set authorized password, if not, exit initial setting, if yes, execute 3-2; 3-2, input administrator authorized password; 3-3: through administrator authorized password, decrypt the trusted device hierarchy authorized password encrypted by the administrator authorized password generated by the hierarchy authorization management program, to get the decrypted trusted device hierarchy authorized password; 3-4: Set the application authorization password through the corresponding application; 3-5: Encrypt the trusted device hierarchy authorization password using the application authorization password; 3-6: Calculate the unique ID of the application. The method for calculating the unique ID is not limited in this invention. For example, a hash algorithm can be used to calculate the unique ID of the application. 3-7: Using the application's unique ID as an index, obtain the ciphertext of the trusted device hierarchy authorization password encrypted with the application's authorization password.

[0027] 4. Destroy the encrypted trusted device hierarchy authorization password, which is encrypted with the application authorization password. like Figure 7 As shown, the process by which the hierarchy authorization manager generates ciphertext for the trusted device hierarchy authorization password, which is encrypted with the application authorization password, includes: 4-1. Enter the destruction operation and check if the current hierarchy has an authorization password set. If not, exit the initial settings. If yes, proceed to step 4-2. 4-2: Enter the administrator authorization password; 4-3: Using the administrator authorization password, decrypt the trusted device hierarchy authorization password encrypted by the administrator authorization password generated by the hierarchy authorization management program to obtain the decrypted trusted device hierarchy authorization password; 4-4: Enter the application authorization password; 4-5: Using the application authorization password, decrypt the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password to obtain the decrypted trusted device hierarchy authorization password; 4-6: Determine if the trusted device hierarchy authorization passwords decrypted in 4-3 and 4-5 are consistent: If they are inconsistent, do not destroy; if they are consistent, destroy the ciphertext of the trusted device hierarchy authorization password encrypted with the application authorization password. III. Trusted Device Management Service Module, Trusted Software Stack, and Trusted Devices The trusted device management service module provides an authorization management function in the form of a service, and can run in an operating system or a secure environment. The secure environment is not limited in the application, such as an environment protected by encrypted memory, a TEE isolated environment, and the like. The trusted device management service module is connected with an interface service module, a hierarchy authorization password ciphertext storage module, a trusted software stack, and a trusted device, and is used to decrypt ciphertext of a trusted device hierarchy authorization password encrypted by an application program authorization password received from the interface service module, to obtain the trusted device hierarchy authorization password. When an application program needs to access the trusted device, the trusted device management service module finds the application program authorization password by taking the unique id value of the application program as an index, and decrypts ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password stored in the hierarchy authorization password ciphertext storage module (corresponding to Figure 3 “performing a hierarchy authorization operation interface” and “decrypting the corresponding hierarchy authorization password ciphertext based on the application program authorization password” in the specification), to obtain the trusted device hierarchy authorization password. The trusted device hierarchy authorization password is used for authentication, and the operation permission of the application program on the trusted device is determined (corresponding to Figure 3 “obtaining the hierarchy authorization password” and “performing the corresponding authorization function” in the specification).

[0028] The trusted software stack is connected between the trusted device management service module and the trusted device, is an open source software stack officially maintained and standardized by a trusted computing organization (TCG), and provides support for TPM 2.0 hardware. The core function is to abstract complex, bottom-layer TPM 2.0 hardware commands and communication interfaces into a set of standard, easy-to-use, and secure programming interfaces (APIs) for software developers to use.

[0029] Four, the hierarchy authorization password ciphertext storage module The hierarchy authorization password ciphertext storage module is arranged in a TEE secure memory, an encrypted card device, and the like, and mainly stores ciphertext of a trusted device hierarchy authorization password encrypted by a management program authorization password and ciphertext of a trusted device hierarchy authorization password encrypted by an application program authorization password.

[0030] In the application, in the hierarchy authorization password ciphertext storage format, the authorization password ciphertext data format can be set as a 32-byte program hash value plus a 16-byte SM4 encrypted authorization password ciphertext. The hierarchy authorization password ciphertext storage format is only provided as a reference in the application, and is not limited.

[0031] The application provides a design method of multi-authorization password based on a trusted device hierarchy, which realizes separation of the distribution right and application right of the hierarchy authorization password based on an authorization management program on the trusted device hierarchy authorization password, and realizes security protection of the hierarchy authorization password when multiple applications call the trusted device based on the trusted device hierarchy authorization verification, so that each application has its own authorization password, the abuse of the trusted device hierarchy password is avoided, and the security of the hierarchy authorization password is improved.

[0032] Although the application has been described by the above preferred embodiments, it is not intended to limit the protection scope of the application, and any person skilled in the art can make various changes and modifications to the above embodiments without departing from the spirit and scope of the application, which are still within the protection scope of the application, therefore, the protection scope of the application is defined by the claims.

Claims

1. A system for implementing multi-application authorization passwords based on a hierarchy of trusted devices, characterized in that: The interface service module, the hierarchy authorization management program, the trusted device management service module and the hierarchy authorization password ciphertext storage module are included, wherein The interface service module is connected with the trusted device management service module, faces different application programs, provides application program authorization passwords through the unique ids of the application programs, realizes service calling of the trusted device hierarchy multi-authorization password, and enables different application programs to obtain unique trusted device hierarchy authorization passwords through different application program authorization passwords. The hierarchy authorization management program is connected with the trusted device management service module, is used for receiving administrator authorization passwords input by an authorization administrator and / or application program authorization passwords transmitted by the interface service module to the trusted device management service module, and realizes management of the trusted device hierarchy authorization password, thereby generating the trusted device hierarchy authorization password encrypted by the administrator authorization password, generating or destroying the ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password, and storing the generated ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password in the hierarchy authorization password ciphertext storage module. The trusted device management service module is connected with the interface service module and the hierarchy authorization password ciphertext storage module, is used for decrypting the ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password based on the application program authorization password received by the interface service module, and obtaining the trusted device hierarchy authorization password.

2. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 1, wherein: The trusted software stack and the trusted device are also included, the trusted device management service module, the trusted software stack and the trusted device are connected in sequence, when an application program needs to access the trusted device, the trusted device management service module finds the application program authorization password with the unique id value of the application program as an index, decrypts the ciphertext of the trusted device hierarchy authorization password encrypted by the application program authorization password in the hierarchy authorization password ciphertext storage module through the application program authorization password, obtains the trusted device hierarchy authorization password, performs authentication based on the plaintext of the trusted device hierarchy authorization password, and determines the operation authority of the application program on the trusted device.

3. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 1, wherein: The hierarchy authorization management program manages the trusted device hierarchy authorization password, and generating the trusted device hierarchy authorization password encrypted by the administrator authorization password includes the following steps: Step S11: inputting an administrator authorization password; Step S12: calling the trusted device to generate a random number, using the generated random number as the trusted device hierarchy authorization password; Step S13: encrypting the trusted device hierarchy authorization password by using the administrator authorization password; Step S14: calculating a unique id of the hierarchy authorization management program; Step S15: indexing the unique id of the hierarchy authorization management program to obtain the trusted device hierarchy authorization password encrypted by the administrator authorization password.

4. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 1, wherein: The management of the trusted device hierarchy authorization password by the hierarchy authorization management program also includes canceling the setting of the trusted device hierarchy authorization password.

5. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 4, wherein: The canceling of the setting of the trusted device hierarchy authorization password by the hierarchy authorization management program includes: Step S21: inputting the administrator authorization password; Step S22: decrypting the trusted device hierarchy authorization password by the administrator authorization password; Step S23: canceling the setting of the trusted device hierarchy authorization password; Step S24: deleting the trusted device hierarchy authorization password encrypted by the application authorization password.

6. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 1, wherein: The generation of the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password by the hierarchy authorization management program includes: Step S31: inputting the administrator authorization password; Step S32: decrypting the trusted device hierarchy authorization password encrypted by the administrator authorization password generated by the hierarchy authorization management program by the administrator authorization password to obtain the decrypted trusted device hierarchy authorization password; Step S33: setting the application authorization password; Step S34: encrypting the trusted device hierarchy authorization password by the application authorization password; Step S35: calculating the unique id of the application; Step S36: indexing the unique id of the application to obtain the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password.

7. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 6, wherein: In the step S35, the unique id of the application is calculated by a hash algorithm.

8. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 1, wherein: The destroying of the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password by the hierarchy authorization management program includes: Step S41: inputting the administrator authorization password; Step S42: decrypting the trusted device hierarchy authorization password encrypted by the administrator authorization password generated by the hierarchy authorization management program by the administrator authorization password to obtain the decrypted trusted device hierarchy authorization password; Step S43: inputting the application authorization password; Step S44: decrypting the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password by the application authorization password to obtain the decrypted trusted device hierarchy authorization password; Step S45: judging whether the trusted device hierarchy authorization passwords decrypted in the step S42 and the step S44 are consistent: if not, the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password is not destroyed; if yes, the ciphertext of the trusted device hierarchy authorization password encrypted by the application authorization password is destroyed.

9. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 1, wherein: The hierarchy authorization password ciphertext storage module is arranged in the TEE secure memory or the encryption card device.

10. The implementation system of multi-application authorization password based on trusted device hierarchy of claim 1, wherein: The ciphertext storage format of the hierarchy authorization password of the trusted device of the application program authorization password encryption is set to a 32-byte program hash value plus 16-byte SM4-encrypted authorization password ciphertext.

Images