Data security storage and trusted computing system in edge computing environment

Abstract

The application relates to the technical field of edge computing, and discloses a data security storage and trusted computing system in an edge computing environment, wherein the system comprises: a first computing module for calculating a first-layer trust value of user behavior in a trusted execution environment security domain; a second computing module for calculating a second-layer trust value of a user request based on the first-layer trust value, and generating an access authorization token according to the second-layer trust value; a remote attestation module for performing remote attestation on a trusted execution environment measurement start chain of each edge node to obtain a trusted node subset; and a third computing module for performing elliptic curve key negotiation and node-specific key packaging distribution based on the access authorization token and the trusted node subset, and performing secret-state computation in the trusted execution environment security domain of the trusted node subset to obtain a signature-encrypted trusted computing result, so that the system eliminates the risk of data leakage of the whole network caused by single-point failure in the prior art.

Images