Trusted Execution Environment Multi-node Authentication Method

Abstract

The present invention discloses a trusted execution environment multi-node authentication method. It is assumed that multiple TEE computing nodes are organized into a computing resource pool, and a computing resource management system allocates computing resources collectively. A unified access and authentication node (AuthNode) is deployed in the resource pool, and the node assists users in completing remote authentication processes for all allocated TEE computing nodes. The beneficial effects of the present invention are: first, users authenticate code security in a cloud computing environment and achieve security protection for computing processes through the TEE; second, user data privacy is achieved, where user data is uploaded to the cloud environment in an encrypted state and only decrypted within the TEE before use; third, users authenticate the accuracy of computing results and ensure that the computing results have not been tampered with; and fourth, complete remote authentication is performed only during the program deployment phase, and the TEE authentication process is completed within the cloud environment, so users only need to perform simple local authentication for the computing process, resulting in high execution efficiency.

Description

[Technical field]

[0001] The present invention relates to the fields of trusted execution environment, cloud environment, remote attestation, and privacy protection, and in particular to a trusted execution environment multi-node authentication method. [Background technology]

[0002] A Trusted Executive Environment (TEE) is a security computing framework that realizes data security protection by installing a security area based on hardware protection within a general-purpose CPU, and the computing process and the memory and registers used cannot be tampered with or stolen due to the chip's native security protection. Unlike a conventional simple security chip, a TEE can realize general-purpose computing functions supported by the CPU. In the conventional CPU + security chip framework, the security chip provides functions such as encryption, signature, and authentication, and the CPU realizes general-purpose computing, so the data in the CPU was not effectively protected. In a TEE, general-purpose computing and functions such as encryption and authentication are completed inside the CPU, and memory encryption and access control are protected by the TEE, so data security protection of the entire computing process can be realized. A TEE can realize remote security computing. Typical TEE devices include the SGX environment provided by Intel CPUs and the TRUST ZONE provided by ARM chips. In a TEE, a remote identity authentication protocol allows a user to perform authentication for the executable code in the TEE and data encryption functions. All existing authentications are single-device (TEE) authentications, Cloud computing integrates computing resources in the cloud through hardware virtualization, provides users with dynamic and scalable computing, storage and network management services, and drives the growth of many Internet companies based on the operation of the cloud. Cloud computing is a typical mode of current large-scale computing resource management and application. However, cloud computing also faces many security issues, and users need to send data to the cloud for storage and computing processing, and there is a risk of users' confidential data being leaked. To realize cloud computing, user data cannot be uploaded in ciphertext, that is, cloud service providers can obtain all the plaintext data of users. To solve this problem, encryption tools such as homomorphic encryption algorithms can be used, but such algorithms are not efficient and cannot provide a high-performance and practical solution. Hardware security solutions based on TEEs provide a more efficient and practical solution for user data protection in cloud computing environments. Since TEEs are general-purpose computing CPUs with security protection functions, security protection of user data can be realized by using TEEs as CPUs in cloud computing.

[0003] In the native TEE authentication scheme, a user can realize remote authentication to a single TEE device. In a cloud computing environment, a computing resource includes multiple entity nodes, so it is necessary to provide a single authentication interface for a user to complete the security authentication of multiple nodes. This application proposes a multi-node trusted execution environment multi-node authentication method suitable for a cloud computing environment. Summary of the Invention [Means for solving the problem]

[0004] The technical problem that the present invention aims to solve is to overcome the deficiencies of the prior art and to propose a reliable execution environment multi-node authentication method.

[0005] In order to solve the above technical problems, the present invention provides the following technical means: The present invention provides a trusted execution environment multi-node authentication method, Suppose that a computing resource pool is configured from multiple TEE computing nodes, and the computing resource management system allocates computing resources collectively. A unified access and authentication node (AuthNode) is configured in the resource pool, which assists users to complete the remote authentication process for all allocated TEE computing nodes. The technical means includes two links: security configuration of user programs and security computing of user data. The main flow is as follows: (1) Security configuration of user programs The user uploads a computing program to the TEE cloud computing environment and applies for the required computing resources. The computing resource pool allocates TEE computing resources to the user, and places the user program in the security computing environment TEE. The AutNode starts the remote attestation process. The TEE node and the AutNode that place all user programs complete the following two functions through a security communication channel: 1) Generate a remote attestation report The TEE node generates a summary report containing basic information such as node information, memory state, and running programs, and uploads the report to the AutNode, which checks the accuracy and completeness of the TEE node report. After the check is passed, the TEE node is added to the trusted resource list. 2) Obtaining a session key The AutNode generates an encryption session key and an authentication session key to be shared with all TEEs, and shares these two keys with all TEE nodes and user nodes via a secure communication channel. AutNode generates a summary report of data including basic information such as its own node information, memory state, and running programs, and then sends it to the user. The user checks the accuracy and completeness of the report. After passing the check, the user confirms that the computing resource is a trustworthy environment. (2) Security computing of user data Users can use a trusted and tested environment to compute data and obtain results. It mainly includes the following two functions: 1) Data upload and computing The user uses the session key to encrypt and sign the data required for computing, and then uploads it to the security computing environment. The security computing environment allocates the computing task to the corresponding TEE computing resource according to a resource scheduling strategy. The TEE decrypts the data, verifies the signature to complete the computing, and obtains the computing result. 2) Check the computing results The TEE computing node encrypts and signs the computing result with the session key and then returns it to the user, and the user can obtain a trusted computing result after verifying and decrypting the signature. Effect of the Invention

[0006] Compared with the prior art, the beneficial effects of the present invention are as follows: First, users can authenticate code security in cloud computing environments and realize the security protection of computing processes through TEE; Second, it protects the privacy of user data. User data is uploaded to the cloud environment in an encrypted state, and the data is decrypted and used only within the TEE. Third, users can authenticate the accuracy of the computing results and ensure that the computing results have not been tampered with; Fourth, complete remote authentication is performed only at the program deployment stage, and the TEE authentication process is completed within the cloud environment, and users only need to perform simple local authentication during the computing process, resulting in high execution efficiency. [Brief description of the drawings]

[0007] The drawings are intended to provide a further understanding of the present invention, and are intended to constitute a part of the specification for explaining the present invention together with the embodiments of the present invention, and are not intended to constitute a limitation of the present invention. [Figure 1] FIG. 2 illustrates the TEE computing resource pool framework of the present invention. [Diagram 2] 1 is a flowchart of the program's security deployment. [Diagram 3] Data security computing flowchart. BEST MODE FOR CARRYING OUT THEINVENTION

[0008] Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings. However, it should be understood that the preferred embodiments described herein are used only for the description and illustration of the present invention and are not used to limit the present invention. (Embodiment 1)

[0009] As shown in FIG. 1-3, the present invention provides a trusted execution environment multi-node authentication method, Suppose that a computing resource pool is configured from multiple TEE computing nodes, and the computing resource management system allocates computing resources collectively. A unified access and authentication node (AuthNode) is configured in the resource pool, which assists users to complete the remote authentication process for all allocated TEE computing nodes. The technical means includes two links: security configuration of user programs and security computing of user data. The main flow is as follows: (1) Security configuration of user programs The user uploads a computing program to the TEE cloud computing environment and applies for the required computing resources. The computing resource pool allocates TEE computing resources to the user, and places the user program in the security computing environment TEE. The AutNode starts the remote attestation process. The TEE node and the AutNode that place all user programs complete the following two functions through a security communication channel: 1) Generate a remote attestation report The TEE node generates a summary report containing basic information such as node information, memory state, and running programs, and uploads the report to the AutNode, which checks the accuracy and completeness of the TEE node report. After the check is passed, the TEE node is added to the trusted resource list. 2) Obtaining a session key The AutNode generates an encryption session key and an authentication session key to be shared with all TEEs, and shares these two keys with all TEE nodes and user nodes via a secure communication channel. AutNode generates a summary report of data including basic information such as its own node information, memory state, and running programs, and then sends it to the user. The user checks the accuracy and completeness of the report. After passing the check, the user confirms that the computing resource is a trustworthy environment. (2) Security computing of user data Users can use a trusted and tested environment to compute data and obtain results. It mainly includes the following two functions: 1) Data upload and computing The user uses the session key to encrypt and sign the data required for computing, and then uploads it to the security computing environment. The security computing environment allocates the computing task to the corresponding TEE computing resource according to a resource scheduling strategy. The TEE decrypts the data, verifies the signature to complete the computing, and obtains the computing result. 2) Check the computing results The TEE computing node encrypts and signs the computing result with the session key and then returns it to the user, and the user can obtain a trusted computing result after verifying and decrypting the signature.

[0010] Specifically, the present invention is applied to a security cloud computing environment based on TEE, and realizes user data security protection and trustworthy computing through two steps: program security configuration and data security computing. The implementation process of the two steps is as follows: 1. Program security configuration The security configuration of the program is used for the user to configure verifiable code in the cloud computing environment and initialize the security computing environment. The specific implementation flow is shown in Figure 2. 1) A user node applies for the placement of a user program to a TEE node cluster, and the node cluster launches the corresponding TEE computing resource to correctly place the user program.

[0011] 2) The TEE cluster correctly arranges the interaction between the user program node and the authentication node AutNode, generates an authentication report of its own execution environment and a corresponding digital signature, and sends it to AutNode. After verifying and approving the remote report, AutNode adds the node to the execution list of the user program.

[0012] 3) The AutNode generates unified authentication and encryption keys Kaut and KEnc for all nodes in the user program list and sends Kaut and KEnc to the TEE node. 4) AutNode generates its own execution environment into a remote report, and sends the remote report and Kaut,KEnc to the user node. After verifying and authorizing the remote report, the user node accepts it as a security remote computing environment and saves Kaut,KEnc.

[0013] 2. Data Security Computing Data security computing is used to enable users to complete data computing in a secure and reliable state in the cloud computing environment. The computing logic is realized based on the security computing environment applied for in the security configuration stage. The specific implementation flow is as shown in Figure 3: 1) The user node encrypts data using KEnc, generates a signature for the data using Kaut, and sends the encrypted data and signature to the node where the user program is deployed in the TEE cluster.

[0014] 2) The TEE node cluster uses KEnc to decrypt the data and uses Kaut to verify the integrity of the data. After the data is decrypted, the computing is completed within the cluster TEE, and the TEE nodes can cooperate to perform computing functions.

[0015] 3) After the computing is completed, the computing result is encrypted by KEnc and signed by Kaut before being sent to the user node. The user node decrypts the execution result and verifies the signature, and if it passes, it accepts the computing result.

[0016] Finally, the above is only a preferred embodiment of the present invention and is not used to limit the present invention, but the present invention has been described in detail with reference to the above embodiments, but those skilled in the art can modify the technical aspects described in each of the above embodiments or replace some of the technical features with equivalents. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

[Claim 1] A trusted execution environment multi-node authentication method, comprising: configuring a plurality of TEE computing nodes into a computing resource pool; and assuming that a computing resource management system allocates computing resources collectively; and configuring a unified access and authentication node (AuthNode) in the resource pool, which assists a user to complete a remote authentication process for all allocated TEE computing nodes; the technical means includes two steps: security configuration of user programs and security computing of user data; and the flow is as follows: (1) Security configuration of user programs The user uploads a computing program to the TEE cloud computing environment and applies for the required computing resources; the computing resource pool allocates the TEE computing resources to the user, and places the user program in the security computing environment TEE; the AutoNode initiates a remote authentication process; the TEE node and the AutoNode that place all the user programs complete the following two functions through a security communication channel: 1) Generate a remote attestation report The TEE node generates a summary report of the data including node information, memory state, and basic information of the running program, and uploads the report to the AutoNode, which checks the accuracy and completeness of the TEE node report, and adds the TEE node to the trusted resource list after passing the check; 2) Obtaining a session key The AutoNode generates an encryption session key and an authentication session key to be shared with all TEEs, and shares these two keys with all TEE nodes and the user node via a secure communication channel; The AutoNode generates a summary report including data on its own node information, memory state, and basic information on the running program, and then sends it to the user. The user checks the accuracy and completeness of the report. After passing the check, the user confirms that the computing resource is a trustworthy environment; (2) Security computing of user data Users can use a trusted environment that has passed testing to realize data computing and result acquisition, and complete the following two functions: 1) Data upload and computing The user node uses the session key to encrypt and sign the data required for computing, and then uploads it to the security computing environment; the security computing environment allocates the computing task to the corresponding TEE computing resource according to a resource scheduling strategy; the TEE node cluster decrypts the data, verifies the signature to complete the computing, and obtains the computing result; 2) Check the computing results The TEE computing node encrypts and signs the computing result with the session key and then returns it to the user node, and the user node verifies and decrypts the signature, after which a reliable computing result is obtained.

Images