Security evaluation method, service processing method, security information transmission method and related device

Abstract

The present application relates to the technical field of communications. Provided are a security evaluation method, a service processing method, a security information transmission method and a related device. The security evaluation method comprises: after a security evaluation request sent by an application server is received, determining a target security evaluation result according to first security information, wherein the first security information comprises security state information of an REE of an electronic device or a security evaluation result of the REE; using a root key of the electronic device to decrypt first ciphertext to obtain a private key of the electronic device, wherein the first ciphertext is ciphertext obtained by means of a security coprocessor using the root key of the electronic device to encrypt the private key of the electronic device; using the private key of the electronic device to sign the target security evaluation result to obtain a signature of the target security evaluation result; and sending second security information to the application server, wherein the second security information comprises the target security evaluation result and the signature of the target security evaluation result.

Description

Security assessment, business processing, security information transmission methods and related equipment

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to Chinese patent application No. 202310715581.6 filed in China on June 15, 2023, the entire contents of which are incorporated herein by reference. Technical Field

[0003] The present application relates to the field of communication technology, and in particular to a method for security assessment, business processing, and security information transmission and related equipment. Background Art

[0004] Before providing services to users, application service providers (for example, mobile payment, mobile banking, financial services, etc.) often need to conduct a security assessment on electronic devices, and only allow them to access services if they determine that the electronic device is a safe and trustworthy device based on the security assessment results. Specifically, the application server sends a security assessment request to the electronic device. Based on the security assessment request, the electronic device obtains the security status information of the Rich Execution Environment (REE) and performs a security assessment, obtains the security assessment result of the REE, and returns the security assessment result to the application server. The application server can then determine whether to allow the electronic device to access the requested service based on the security assessment result. However, the reliability of this security assessment method is poor.

[0005] Summary of the Invention

[0006] The embodiments of the present application provide a security assessment, business processing, security information transmission method and related equipment, which can improve the reliability of security assessment results of electronic devices.

[0007] In a first aspect, an embodiment of the present application provides a security assessment method, the method comprising:

[0008] Upon receiving a security assessment request sent by an application server, the security coprocessor of the electronic device determines a target security assessment result according to first security information, wherein the first security information includes security status information of a rich execution environment (REE) of the electronic device or a security assessment result of the REE;

[0009] The security coprocessor of the electronic device decrypts the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, where the first ciphertext is the ciphertext obtained by encrypting the private key of the electronic device by the security coprocessor using the root key of the electronic device;

[0010] The security coprocessor of the electronic device signs the target security assessment result using the private key of the electronic device to obtain a signature of the target security assessment result;

[0011] The electronic device sends second security information to the application server, wherein the second security information includes the target security assessment result and a signature of the target security assessment result.

[0012] In a second aspect, an embodiment of the present application provides a security assessment device, applied to an electronic device, comprising:

[0013] a first determining module configured to, upon receiving a security assessment request sent by an application server, determine a target security assessment result based on first security information, wherein the first security information includes security status information of a rich execution environment (REE) of the electronic device or a security assessment result of the REE;

[0014] a decryption module, configured to decrypt a first ciphertext using a root key of the electronic device to obtain a private key of the electronic device, wherein the first ciphertext is a ciphertext obtained by encrypting the private key of the electronic device using the root key of the electronic device by a security coprocessor of the electronic device;

[0015] A signature module, configured to sign the target security assessment result using a private key of the electronic device to obtain a signature of the target security assessment result;

[0016] The first sending module is configured to send second security information to the application server, wherein the second security information includes the target security assessment result and a signature of the target security assessment result.

[0017] In a third aspect, an embodiment of the present application provides a service processing method, the method comprising:

[0018] The application server sends a security assessment request to the electronic device, wherein the security assessment request is used to request an assessment of the security of the electronic device;

[0019] The application server receives second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information, the target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device, and the first digital certificate information includes a digital certificate of the electronic device or an identifier of the digital certificate of the electronic device, where the digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server;

[0020] The application server determines whether to allow the electronic device to access a target service or not to allow the electronic device to access the target service according to the second security information, wherein the target service is a service provided by the application server to the electronic device.

[0021] In a fourth aspect, an embodiment of the present application provides a service processing device, applied to an application server, the device comprising:

[0022] A third sending module is configured to send a security assessment request to the electronic device, wherein the security assessment request is used to request an assessment of the security of the electronic device;

[0023] a first receiving module, configured to receive second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information, the target security assessment result is used to indicate the security of a rich execution environment (REE) of the electronic device, and the first digital certificate information includes a digital certificate of the electronic device or an identifier of the digital certificate of the electronic device, where the digital certificate of the electronic device is obtained by signing a public key of the electronic device using a private key of a management server;

[0024] A third determining module is configured to determine, based on the second security information, whether to allow the electronic device to access a target service or not, wherein the target service is a service provided by the application server to the electronic device.

[0025] In a fifth aspect, an embodiment of the present application provides a method for transmitting secure information, the method comprising:

[0026] The management server generates a digital certificate, wherein the digital certificate includes the digital certificate of the electronic device and the digital certificate of the management server, the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server, the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs;

[0027] The management server sends second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device.

[0028] In a sixth aspect, an embodiment of the present application provides a secure information transmission device, applied to a management server, the device comprising:

[0029] A generation module, configured to generate a digital certificate, wherein the digital certificate includes a digital certificate of the electronic device and a digital certificate of the management server, the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server, the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs;

[0030] The fourth sending module is configured to send second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device.

[0031] In the seventh aspect, an embodiment of the present application provides an electronic device, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps in the security assessment method described in the first aspect are implemented.

[0032] In an eighth aspect, an embodiment of the present application provides an application server comprising a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the programs or instructions are executed by the processor, the steps in the business processing method described in the third aspect are implemented.

[0033] In the ninth aspect, an embodiment of the present application provides a management server, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the programs or instructions are executed by the processor, the steps in the security information transmission method described in the fifth aspect are implemented.

[0034] In the tenth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps in the security assessment method as described in the first aspect are implemented, or the steps in the business processing method as described in the third aspect are implemented, or the steps in the security information transmission method as described in the fifth aspect are implemented.

[0035] In the eleventh aspect, an embodiment of the present application provides a chip, which includes a processor and a communication interface, the communication interface and the processor are coupled, and the processor is used to run programs or instructions to implement the method described in the first aspect, or implement the steps in the business processing method described in the third aspect, or implement the steps in the security information transmission method described in the fifth aspect.

[0036] In the twelfth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the method as described in the first aspect, or implement the steps in the business processing method as described in the third aspect, or implement the steps in the security information transmission method as described in the fifth aspect.

[0037] In an embodiment of the present application, upon receiving a security assessment request sent by an application server, the security coprocessor of the electronic device determines a target security assessment result based on first security information, wherein the first security information includes the security status information of the REE of the electronic device or the security assessment result of the REE; the security coprocessor of the electronic device uses the root key of the electronic device to decrypt the first ciphertext to obtain the private key of the electronic device, and the first ciphertext is the ciphertext obtained by encrypting the private key of the electronic device by the security coprocessor of the electronic device using the root key of the electronic device; the security coprocessor of the electronic device uses the private key of the electronic device to sign the target security assessment result to obtain the target security assessment result. Signature; the electronic device sends the second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result, that is, the embodiment of the present application determines the target security assessment result through the security coprocessor of the electronic device, and signs the target security assessment result through the private key of the electronic device, and encrypts the private key of the electronic device with the root key of the electronic device. In this way, the security assessment result can be bound to the electronic device, reducing the occurrence of tampering of the security assessment result, and thus improving the reliability of the security assessment result of the electronic device. In addition, since the security coprocessor has the ability to resist attacks such as hardware side channels and fault injection, the security of the above-mentioned security assessment process can be guaranteed. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] FIG1 is a flow chart of a security assessment method provided in an embodiment of the present application;

[0039] FIG2 is a schematic diagram of a security assessment system provided in an embodiment of the present application;

[0040] FIG3 is a flow chart of another security assessment method provided in an embodiment of the present application;

[0041] FIG4 is a flow chart of another security assessment method provided in an embodiment of the present application;

[0042] FIG5 is a flowchart of another security assessment method provided in an embodiment of the present application;

[0043] FIG6 is a flowchart of another security assessment method provided in an embodiment of the present application;

[0044] FIG7 is a schematic structural diagram of a security assessment device provided in an embodiment of the present application;

[0045] FIG8 is a schematic structural diagram of another security assessment device provided in an embodiment of the present application;

[0046] FIG9 is a schematic structural diagram of another security assessment device provided in an embodiment of the present application;

[0047] FIG10 is a schematic structural diagram of another security assessment device provided in an embodiment of the present application;

[0048] FIG11 is a schematic structural diagram of a service processing device provided in an embodiment of the present application;

[0049] FIG12 is a schematic structural diagram of another service processing device provided in an embodiment of the present application;

[0050] FIG13 is a schematic structural diagram of a secure information transmission device provided in an embodiment of the present application;

[0051] FIG14 is a schematic structural diagram of another secure information transmission device provided in an embodiment of the present application;

[0052] FIG15 is a schematic diagram of a structure of an electronic device provided in an embodiment of the present application;

[0053] FIG16 is a second structural diagram of an electronic device provided in an embodiment of the present application;

[0054] FIG17 is a schematic diagram of the structure of a server provided in an embodiment of the present application. DETAILED DESCRIPTION

[0055] The following will be combined with the accompanying drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the embodiments described are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field are within the scope of protection of this application.

[0056] The terms "first," "second," and the like in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a specific order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, so that the embodiments of this application can be implemented in an order other than that illustrated or described herein, and that the objects distinguished by "first," "second," and the like are generally of the same type, and do not limit the number of objects; for example, the first object can be one or more. In addition, the term "and / or" in the specification and claims refers to at least one of the connected objects, and the character " / " generally indicates that the objects connected are in an "or" relationship.

[0057] The following, in conjunction with the accompanying drawings, describes in detail the security assessment method, device, electronic device, management server, and application server provided in the embodiments of the present application through specific embodiments and their application scenarios.

[0058] Referring to FIG1 , FIG1 is a flow chart of a security assessment method provided in an embodiment of the present application, as shown in FIG1 , comprising the following steps:

[0059] Step 101: An application server sends a security assessment request to an electronic device, where the security assessment request is used to request an assessment of the security of the electronic device.

[0060] In this embodiment, the application server may be any server that provides application services (e.g., mobile payment, mobile banking, financial services, etc.). The electronic device may be a terminal, wherein the terminal may be a mobile phone, a tablet computer (Tablet Personal Computer), a laptop computer (Laptop Computer), a notebook computer, a personal digital assistant (PDA), a handheld computer, a netbook, an ultra-mobile personal computer (UMPC), an augmented reality (AR), a virtual reality (VR) device, a robot, a wearable device (Wearable Device), a vehicle user equipment (VUE), a shipborne device, a pedestrian user equipment (PUE), a game console, a personal computer (PC), or other terminal-side devices.

[0061] The security assessment request may include an authorization token. Exemplarily, the authorization token may be an authorization token issued by a management server of the electronic device.

[0062] For example, the application server may send a security assessment request to the REE side of the electronic device. For example, as shown in FIG2 , the application server may send a security assessment request to a security assessment client application (i.e., Client App) on the REE side of the electronic device via a security assessment module of the application server.

[0063] In some optional embodiments, the application server may transmit the security assessment request to the electronic device based on a transmission security mechanism. For example, the application server may transmit the security assessment request to the electronic device via the Transport Layer Security (TLS) protocol to improve transmission security.

[0064] Step 102: When the electronic device receives a security assessment request sent by the application server, the security coprocessor of the electronic device determines a target security assessment result based on first security information, wherein the first security information includes security status information of the REE of the electronic device or a security assessment result of the REE.

[0065] The electronic device includes a security coprocessor, such as a secure processing unit (SPU). In addition, the electronic device also includes a REE and a trusted execution environment (TEE), wherein a rich execution environment operating system (OS) runs in the REE, and a trusted execution environment operating system runs in the TEE, as shown in FIG2 . It should be noted that the security coprocessor has the ability to resist attacks such as hardware side channels and fault injection, and its security is strong. However, the TEE has security risks such as software side channel attacks and reverse engineering attacks on TEE applications, and its security is lower than that of the security coprocessor.

[0066] Specifically, when the electronic device receives a security assessment request sent by the application server, the security protocol processor of the electronic device can obtain the first security information and determine the target security assessment result based on the first security information. For example, the security protocol processor of the electronic device can receive the first security information from the TEE side of the electronic device, and the TEE side of the electronic device can receive the security status information of the REE from the REE side of the electronic device.

[0067] Exemplarily, the REE side of the electronic device receives the security assessment request sent by the application server, collects the security status information of the REE, and can send the authorization token, the security status information of the REE, etc. to the TEE side of the electronic device. Then, the TEE side can verify the validity of the authorization token to detect whether the application server has the authority to obtain the security status of the electronic device. For example, when the TEE side determines that the above authorization token is valid, it determines that the application server has the authority to obtain the security status of the electronic device. In this case, subsequent security assessment related operations can be continued; when the verification of the above authorization token fails or it is determined that the above authorization token is invalid, the security assessment related operations can be terminated and a prompt message can be returned to prompt the application server to reapply for the authorization token.

[0068] Furthermore, when it is determined that the application server has the authority to obtain the security status of the electronic device, the TEE side can send the security status information of the REE to the security coprocessor; or, the TEE side can perform a security assessment based on the security status information of the REE, obtain the security assessment result of the REE, and send the security status information of the TEE and the security assessment result of the REE to the security coprocessor.

[0069] In some optional embodiments, the first security information may also include security status information of the TEE of the electronic device or a security assessment result of the TEE.

[0070] Accordingly, the TEE side can collect the security status information of the TEE and send the security status information of the TEE and the security status information of the REE to the security coprocessor; or, the TEE side can perform a security assessment based on the security status information of the REE, obtain the security assessment result of the REE, and send the security status information of the TEE and the security assessment result of the REE to the security coprocessor; or, the TEE side can perform a security assessment based on the security status information of the REE, obtain the security assessment result of the REE, perform a security assessment based on the security status information of the TEE, obtain the security assessment result of the TEE, and send the security assessment result of the TEE and the security assessment result of the REE to the security coprocessor.

[0071] Exemplarily, when the first security information includes the security status information of the REE, the security coprocessor can perform a security assessment based on the security status information of the REE to obtain a security assessment result of the REE, and can use the above security assessment result of the REE as the target security assessment result; when the first security information includes the security assessment result of the REE and the security status information of the TEE, the security coprocessor can perform a security assessment based on the security status information of the TEE to obtain a security assessment result of the TEE, and can combine the above security assessment result of the REE and the security assessment result of the TEE to obtain the target security assessment result; when the first security information includes the security assessment result of the REE and the security assessment result of the TEE, the security coprocessor can directly combine the above security assessment result of the REE and the security assessment result of the TEE to obtain the target security assessment result.

[0072] The security assessment results of the above-mentioned comprehensive REE and the security assessment results of the above-mentioned TEE are used to obtain a target security assessment result. For example, the security assessment results of the above-mentioned REE and the security assessment results of the above-mentioned TEE can be weighted summed or comprehensively scored according to a preset model to obtain the target security assessment result.

[0073] The security status information of the above-mentioned REE may include, but is not limited to, indicator elements such as malicious / deceptive / counterfeit applications, virus infection, application signature verification, verified startup, application-layer data encryption, software-based memory vulnerability defense, application-layer trust measurement, and status information of each indicator element. For example, for an indicator element of malicious / deceptive / counterfeit applications, the corresponding status information may be one of non-existent, unknown, and existing. For another example, for an indicator element of virus infection, the corresponding status information may be one of non-existent, unknown, and existing. For another example, for an indicator element of verified startup, the corresponding status information may be one of supported and unsupported.

[0074] For example, for a safety assessment based on the safety status information of a REE, a score corresponding to each indicator element can be determined based on the status information of each indicator element in the safety status information of the REE, and then a safety assessment result of the REE can be calculated based on the score and weight corresponding to each indicator element; or the safety status information of the REE can be input into a pre-built safety status assessment model to obtain the safety assessment result of the REE.

[0075] The security status information of the above-mentioned TEE may include but is not limited to indicator elements such as malicious / deceptive / counterfeit applications, virus infection, trusted verification startup, trusted user interaction, biometric identification, sensitive information storage, kernel real-time security protection, system integrity measurement, kernel control flow integrity measurement, and status information of each indicator element. For example, for the indicator element of malicious / deceptive / counterfeit applications, the corresponding status information may be one of non-existent, unknown, and existing. For another example, for the indicator element of virus infection, the corresponding status information may be one of non-existent, unknown, and existing. For another example, for the indicator element of trusted verification startup, the corresponding status information may be one of supported and unsupported.

[0076] Exemplarily, for security assessment based on the security status information of TEE, the score corresponding to each indicator element can be determined based on the status information of each indicator element of the security status information of the above TEE, and then the security assessment result of the above TEE can be calculated based on the score and weight corresponding to each indicator element; or the security status information of the above TEE can be input into a pre-built security status assessment model to obtain the security assessment result of the above TEE.

[0077] Step 103: The security coprocessor decrypts the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, where the first ciphertext is the ciphertext obtained by encrypting the private key of the electronic device using the root key of the electronic device by the security coprocessor.

[0078] The root key may be a random number generated by the electronic device, for example, a random number generated by a hardware security module (HSM) or a security coprocessor of the electronic device. The root key may be stored in a secure storage area, such as a one-time programmable (OTP) memory. The OTP memory may be located in a security protocol processor or elsewhere in the electronic device other than the security coprocessor.

[0079] It should be noted that the root key can be a newly generated root key for the security assessment of the electronic device, that is, the root key can be a root key dedicated to the security assessment of the electronic device; or the root key can be a reused existing root key. In this case, in addition to being used for the security assessment of the electronic device, the root key is also used for other services or functions, for example, for the lock screen function of the electronic device. In some optional embodiments, the root key already in the OTP memory of the electronic device can be reused to perform the security assessment of the electronic device.

[0080] The private key of the electronic device and the public key of the electronic device form a public-private key pair, wherein the public-private key pair of the electronic device can be generated by a hardware security module or a security coprocessor of the electronic device. In addition, the private key of the electronic device can be encrypted by the security coprocessor using the root key of the electronic device and then stored in a storage area of ​​the electronic device, for example, in the flash memory or OTP memory of the electronic device, thereby reducing the risk of leakage of the private key of the electronic device.

[0081] Exemplarily, the security coprocessor can read the root key of the electronic device from the OTP memory of the security coprocessor and obtain the first ciphertext from the flash memory of the electronic device, and then decrypt the first ciphertext based on the root key of the electronic device to obtain the private key of the electronic device.

[0082] In some optional embodiments, the root key pair of the electronic device is generated by the security coprocessor, which can improve the security of the public-private key pair of the electronic device.

[0083] In some optional embodiments, the public-private key pair of the electronic device is generated by the security coprocessor; wherein, the public-private key pair of the electronic device includes the private key of the electronic device and the public key corresponding to the private key of the electronic device, which can improve the security of the public-private key pair of the electronic device.

[0084] It should be noted that the above-mentioned root key may also be referred to as a security assessment trust root, the private key of the above-mentioned electronic device may also be referred to as a device private key, and the public key of the above-mentioned electronic device may also be referred to as a device public key.

[0085] Step 104: The security coprocessor uses the private key of the electronic device to sign the target security assessment result to obtain a signature of the target security assessment result.

[0086] In some optional embodiments, the security coprocessor can perform a hash calculation on the target security assessment result to obtain a hash value of the target security assessment result, and use the private key of the electronic device to sign the hash value of the target security assessment result to obtain a signature of the target security assessment result. This can improve the efficiency of signing the target security assessment result compared to directly using the private key of the electronic device to sign the target security assessment result.

[0087] Step 105: The electronic device sends second security information to the application server, wherein the second security information includes the target security assessment result and a signature of the target security assessment result.

[0088] For example, the security coprocessor can send the second security information to the TEE side, the TEE side can send the second security information to the REE side, and the REE side can send the second security information to the application server. For example, the security coprocessor can send the second security information to the security assessment trusted application (Trusted App) on the TEE side, the security assessment trusted application on the TEE side can send the second security information to the security assessment client application on the REE side, and the security assessment client application on the REE side can send the second security information to the security assessment module of the application server.

[0089] In some optional embodiments, the REE side of the electronic device can use a transmission security mechanism to send the above-mentioned second security information to the application server. For example, the REE side of the electronic device can transmit the above-mentioned second security information to the application server based on the TLS protocol to improve the security of the transmission.

[0090] Step 106: Upon receiving the second security information, the application server determines whether to allow the electronic device to access a target service or not based on the second security information, wherein the target service is a service provided by the application server to the electronic device.

[0091] Exemplarily, the signature of the target security assessment result can be verified based on the public key of the electronic device. If the verification is successful, it can be determined based on the above target security assessment result whether the electronic device is allowed to access the target business or not. For example, if the above target security assessment result indicates that the electronic device is a secure device, the electronic device is allowed to access the target business. If the above target security assessment result indicates that the electronic device is an unsafe device, the electronic device is not allowed to access the target business. It is understandable that if the signature of the above target security assessment result is not verified, the electronic device is not allowed to access the target business.

[0092] In this embodiment of the present application, a security coprocessor determines a target security assessment result, signs the target security assessment result using the electronic device's private key, and encrypts the electronic device's private key using the electronic device's root key. This allows the security assessment result to be bound to the electronic device, reducing the likelihood of tampering with the security assessment result and thereby improving the reliability of the electronic device's security assessment result. Furthermore, because the security coprocessor is resistant to attacks such as hardware side-channel attacks and fault injection, the security of the aforementioned security assessment process can be guaranteed.

[0093] In some optional embodiments, the second security information further includes first digital certificate information, where the first digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device;

[0094] The digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server.

[0095] In this embodiment, the management server can be used to manage electronic devices. The private key of the management server and the public key of the management server form a public-private key pair of the management server. Exemplarily, the public-private key pair of the management server can be generated by a key management service (KMS) or a hardware security module of the management server and stored in the hardware security module of the management server. It should be noted that the private key of the management server can also be referred to as a server private key, and the public key of the management server can also be referred to as a server public key.

[0096] In some optional embodiments, the first digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server;

[0097] Among them, the digital certificate of the management server is obtained by signing the public key of the management server using the private key of the management server, or by signing the public key of the management server using the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located at the upper level of the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0098] Accordingly, before step 105, that is, before the electronic device sends the second security information to the application server, the method may further include:

[0099] The management server generates a digital certificate, wherein the digital certificate includes the digital certificate of the electronic device and the digital certificate of the management server, the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server, the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs;

[0100] The management server sends second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device;

[0101] The electronic device stores the second digital certificate information when receiving the second digital certificate information from the management server.

[0102] Specifically, the management server can sign the public key of the electronic device based on the private key of the management server to obtain the digital certificate of the electronic device, and can sign the public key of the management server based on the private key of the management server or the private key corresponding to the public key of the target digital certificate to obtain the digital certificate of the management server, and can send the digital certificate of the above-mentioned electronic device and the digital certificate of the management server to the electronic device, and then the electronic device can store the digital certificate of the above-mentioned electronic device and the digital certificate of the management server in the flash memory of the electronic device.

[0103] In some optional embodiments, before the management server generates the digital certificate, the management server may receive a digital certificate generation request from the electronic device, and then the management server may generate the digital certificate based on the digital certificate generation request. Optionally, the digital certificate generation request may include the public key of the electronic device.

[0104] In some optional embodiments, the second digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

[0105] Accordingly, the above step 106, that is, the application server determining whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service according to the second security information, may include:

[0106] The application server verifies the digital certificate of the management server according to the public key in the digital certificate of the management server or the target digital certificate;

[0107] The application server verifies the digital certificate of the electronic device according to the digital certificate of the management server if the digital certificate of the management server passes the verification;

[0108] The application server verifies the signature of the target security assessment result according to the digital certificate of the electronic device when the digital certificate of the electronic device passes the verification;

[0109] If the signature of the target security assessment result passes verification, the application server determines, based on the target security assessment result, whether to allow the electronic device to access the target service or not.

[0110] It can be understood that, when the digital certificate of the management server is obtained by signing the public key of the management server using the private key of the management server, the application server verifies the digital certificate of the management server based on the public key in the digital certificate of the management server; when the digital certificate of the management server is obtained by signing the public key of the management server using the private key corresponding to the public key of the target digital certificate, the application server verifies the digital certificate of the management server based on the target digital certificate.

[0111] The above-mentioned determination of allowing the electronic device to access the target service or not allowing the electronic device to access the target service is based on the target security assessment result. For example, when the above-mentioned target security assessment result determines that the electronic device is a safe device, the application server allows the electronic device to access the target service. When the above-mentioned target security assessment result determines that the electronic device is an unsafe device, the application server does not allow the electronic device to access the target service.

[0112] In some optional embodiments, the application server does not allow the electronic device to access the target service if any of the following conditions is met:

[0113] The digital certificate of the management server fails to pass the verification or the verification fails;

[0114] The digital certificate of the electronic device fails to pass verification or verification fails;

[0115] The signature of the target security assessment result did not pass verification or verification failed.

[0116] The embodiment of the present application verifies the signature of the digital certificate chain (i.e., the digital certificate of the management server, the digital certificate of the electronic device, and the signature of the target security assessment result) based on the target digital certificate or the digital certificate of the management server, and determines whether to allow the electronic device to access the target business or not based on the target security assessment result only when the verification of the above-mentioned digital certificates is passed. This can further reduce the occurrence of the above-mentioned target security assessment results being tampered with by attackers, and further ensure the reliability of the security assessment.

[0117] In some optional implementations, when the second digital certificate information also includes the digital certificate of the management server, the application server can directly verify the digital certificate of the management server based on the public key in the digital certificate of the management server or the target digital certificate; when the second digital certificate information also includes the identifier of the digital certificate of the management server, the application server can obtain the digital certificate of the management server from the management server based on the identifier of the digital certificate of the management server, and then can verify the digital certificate of the management server based on the public key in the digital certificate of the management server or the target digital certificate.

[0118] In some optional implementations, when the second digital certificate information does not include the digital certificate of the management server or the identifier of the digital certificate of the management server, the application server can determine the identifier of the digital certificate of the management server based on the digital certificate of the electronic device, obtain the digital certificate of the management server based on the identifier of the digital certificate of the management server, and then verify the digital certificate of the management server based on the public key in the digital certificate of the management server or the target digital certificate according to the application server.

[0119] In some optional embodiments, before step 102, that is, before the security coprocessor determines a target security assessment result based on the first security information, the method further includes:

[0120] The security coprocessor obtains a target verification result of the electronic device, wherein the target verification result is a verification result obtained by a management server verifying the security of the electronic device;

[0121] Accordingly, the above step 102, i.e., the security coprocessor determining the target security assessment result according to the first security information, includes:

[0122] In a case where the target verification result indicates that the electronic device is a secure device, the security coprocessor determines a target security assessment result according to the first security information.

[0123] Exemplarily, the security coprocessor may send a verification request to the management server and receive a verification result from the management server each time a security assessment is required, to ensure that the electronic device itself is a safe device each time a security assessment is performed; alternatively, the security coprocessor may periodically send a verification request to the management server, receive and store the verification result from the management server, and determine the security of the electronic device itself based on the verification result in each cycle, thereby saving overhead while ensuring that the electronic device itself is a safe device.

[0124] Accordingly, after the security coprocessor obtains the target verification result, if the target verification result indicates that the electronic device is a safe device, the security coprocessor can determine the target security assessment result based on the first security information; if the target verification result indicates that the electronic device is an unsafe device, the security coprocessor can end the process, that is, stop the security assessment related operations, and prompt the application server that the security assessment has failed or the electronic device is an unsafe device.

[0125] The embodiment of the present application verifies the security of the electronic device itself through the management server, which can ensure that when the electronic device itself is a safe device, the security coprocessor determines the target security assessment result based on the first security information, which can further improve the reliability of the security assessment of the electronic device.

[0126] Referring to FIG3 , FIG3 is a flow chart of a security assessment method provided in an embodiment of the present application, as shown in FIG3 , including the following steps:

[0127] Step 301: The application server sends a security assessment request to the REE side of the electronic device. The security assessment request is used to request an assessment of the security of the electronic device, and the security assessment request includes an authorization token.

[0128] Step 302: When the REE side of the electronic device receives the security assessment request sent by the application server, the REE side of the electronic device obtains security status information of the REE.

[0129] Step 303: The REE side of the electronic device sends the authorization token and the security status information of the REE to the TEE side of the electronic device.

[0130] Step 304: Upon receiving the authorization token and the security status information of the REE, the TEE of the electronic device verifies whether the authorization token is valid.

[0131] Among them, when the TEE side determines that the above-mentioned authorization token is valid, it determines that the application server has the authority to obtain the security status of the electronic device. In this case, step 305 is executed. Otherwise, the security assessment related operations can be terminated and a prompt message is returned to prompt the application server to reapply for the authorization token.

[0132] Step 305: The TEE side of the electronic device collects security status information of the TEE, performs a security assessment based on the security status information of the REE, and obtains a security assessment result of the REE.

[0133] Step 306: The TEE side of the electronic device sends first security information to the security coprocessor of the electronic device, where the first security information includes the security status information of the TEE and the security assessment result of the REE.

[0134] It should be noted that, for the above steps 301 to 306, reference can be made to the relevant description of the above embodiment, which will not be repeated here.

[0135] Step 307: Upon receiving the first security information, the security coprocessor sends a verification request to the management server through the TEE and REE of the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device.

[0136] In some optional embodiments, when the security coprocessor receives the first security information, it queries whether there is a verification result of the electronic device within the validity period in the electronic device; when there is a verification result of the electronic device within the validity period in the electronic device, the verification result of the electronic device within the validity period is determined as the target verification result; when there is no verification result of the electronic device within the validity period in the electronic device, the security coprocessor sends a verification request to the management server through the TEE and REE of the electronic device. This not only improves the efficiency of security verification of the electronic device, but also saves resource overhead.

[0137] It should be noted that in this embodiment, after each verification result is received from the management server via the TEE and REE of the electronic device, the security coprocessor can store the verification result and set a corresponding validity period. During the validity period, the security coprocessor can determine whether the electronic device itself is a secure device based on the verification result. The validity period can be reasonably set according to actual needs.

[0138] Optionally, the security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0139] Exemplarily, the device fingerprint may be information that can uniquely identify the electronic device, such as a unique serial number of the device, a device identifier, and the like.

[0140] Step 308: Upon receiving the verification request, the management server verifies the security of the electronic device according to security verification related parameters of the electronic device to obtain a verification result, wherein the verification result is used to indicate whether the electronic device is a safe device or an unsafe device.

[0141] For example, the management server may verify the security of the electronic device based on whether the electronic device's system version is the latest version, whether the firmware version is the latest version, whether the system is rooted, whether the hardware configuration has been tampered with, whether the firmware configuration has been tampered with, and obtain a verification result. The security verification of the electronic device by the management server may also be referred to as remote device attestation, and the verification result may also be referred to as a remote device attestation result.

[0142] In some optional embodiments, the management server verifies the security of the electronic device according to security verification related parameters of the electronic device, and after obtaining the verification result, the method further includes:

[0143] The management server sends the verification result to the application server.

[0144] In this embodiment, the management server may also send a verification result to the application server. The application server may determine whether the electronic device itself is a safe device or an unsafe device based on the verification result, and may further decide whether to allow the electronic device to access the target service.

[0145] Exemplarily, when the above verification result indicates that the electronic device is a safe device, the application server may determine whether to allow the electronic device to access the target service based on the above target security assessment result. When the above verification result indicates that the electronic device is an unsafe device, the application server may not allow the electronic device to access the target service.

[0146] In some optional embodiments, when the verification result indicates that the electronic device is an unsafe device, the management server sends the verification result to the application server; accordingly, upon receiving the verification result, the application server does not allow the electronic device to access the target service.

[0147] Step 309: The management server sends the verification result to the electronic device.

[0148] Step 310: When the security coprocessor receives the verification result sent by the management server through the TEE and REE of the electronic device, if the verification result indicates that the electronic device is a secure device, the security coprocessor determines a target security assessment result based on the first security information.

[0149] Optionally, if the verification result indicates that the electronic device is an unsafe device, the electronic device sends first indication information to the application server, where the first indication information is used to indicate that the electronic device is an unsafe device or that a security assessment of the electronic device has failed.

[0150] Step 311: The security coprocessor of the electronic device uses the root key of the electronic device to decrypt the first ciphertext to obtain the private key of the electronic device. The first ciphertext is the ciphertext obtained by the security coprocessor encrypting the private key of the electronic device using the root key of the electronic device.

[0151] Step 312: The security coprocessor of the electronic device signs the target security assessment result using the private key of the electronic device to obtain a signature of the target security assessment result.

[0152] Step 313: The security coprocessor of the electronic device sends the second security information to the TEE side, wherein the second security information includes the target security assessment result, the signature of the target security assessment result and the first digital certificate information, and the first digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device, and the digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server.

[0153] In some optional embodiments, the first digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

[0154] Step 314: The TEE side sends the second security information to the REE side.

[0155] Step 315: The REE side sends the second security information to the application server.

[0156] Step 316: Upon receiving the second security information, the application server determines whether to allow the electronic device to access a target service or not based on the second security information, wherein the target service is a service provided by the application server to the electronic device.

[0157] It should be noted that, for the above steps 311 to 316, reference can be made to the relevant description of the above embodiment, which will not be repeated here.

[0158] In the embodiment of the present application, the target security assessment result is determined by the security coprocessor of the electronic device, and the target security assessment result is signed by the private key of the electronic device, and the private key of the electronic device is encrypted using the root key of the electronic device. This can achieve the binding of the security assessment result with the electronic device, reduce the occurrence of tampering of the security assessment result, and thus improve the reliability of the security assessment result of the electronic device. In addition, the security of the electronic device itself is verified by the management server. This can ensure that the security coprocessor determines the target security assessment result based on the first security information when the electronic device itself is a secure device, which can further improve the reliability of the security assessment of the electronic device.

[0159] Referring to FIG4 , FIG4 is a flow chart of a security assessment method provided in an embodiment of the present application, as shown in FIG4 , including the following steps:

[0160] Step 401: Upon receiving a security assessment request sent by an application server, the security coprocessor of the electronic device determines a target security assessment result based on first security information, wherein the first security information includes security status information of a rich execution environment (REE) of the electronic device or a security assessment result of the REE.

[0161] Specifically, when the electronic device receives a security assessment request sent by the application server, the security protocol processor of the electronic device can obtain the first security information and determine the target security assessment result based on the first security information. For example, the security protocol processor of the electronic device can receive the first security information from the TEE side of the electronic device, and the TEE side of the electronic device can receive the security status information of the REE from the REE side of the electronic device.

[0162] Step 402: The security coprocessor of the electronic device decrypts the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, where the first ciphertext is the ciphertext obtained by the security coprocessor encrypting the private key of the electronic device using the root key of the electronic device.

[0163] Step 403: The security coprocessor of the electronic device signs the target security assessment result using the private key of the electronic device to obtain a signature of the target security assessment result.

[0164] Step 404: The electronic device sends second security information to the application server, wherein the second security information includes the target security assessment result and a signature of the target security assessment result.

[0165] Optionally, the root key is stored in an OTP memory of the electronic device.

[0166] In this embodiment, the root key is stored in the OTP memory to prevent the root key from being tampered with.

[0167] It should be noted that the above-mentioned OTP memory may be located in the security coprocessor, or may be located in a location different from the security coprocessor in the electronic device.

[0168] Optionally, the root key of the electronic device is generated by the security coprocessor.

[0169] In this embodiment, the root key of the electronic device is generated by the security coprocessor. Since the security coprocessor has the ability to resist attacks such as hardware side channels and fault injection, the security of the root key of the electronic device is improved.

[0170] Optionally, the public-private key pair of the electronic device is generated by the security coprocessor;

[0171] The public-private key pair of the electronic device includes a private key of the electronic device and a public key corresponding to the private key of the electronic device.

[0172] In this embodiment, the public-private key pair of the electronic device is generated by the security coprocessor. Since the security coprocessor has the ability to resist attacks such as hardware side channels and fault injection, the security of the public-private key pair of the electronic device is improved.

[0173] In some optional embodiments, the root key of the electronic device is generated by the security coprocessor, and the root key is stored in the OTP memory of the security coprocessor, so that the root key of the electronic device can only be accessed by the security coprocessor and will not be exposed to any software.

[0174] In some optional embodiments, the root key of the electronic device is different from other device identifiers of the electronic device, that is, other device identifiers of the electronic device are not reused as root keys. This can prevent different services from being associated through the same device identifier, thereby reducing security risks such as device tracking and information leakage.

[0175] Optionally, the second security information further includes first digital certificate information, where the first digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device;

[0176] The digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server.

[0177] Optionally, the first digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server;

[0178] Among them, the digital certificate of the management server is obtained by signing the public key of the management server using the private key of the management server, or by signing the public key of the management server using the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located at the upper level of the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0179] Optionally, before the security coprocessor of the electronic device determines a target security assessment result according to the first security information, the method further includes:

[0180] The electronic device obtains a target verification result of the electronic device, wherein the target verification result is a verification result obtained by a management server verifying the security of the electronic device;

[0181] The security coprocessor of the electronic device determines a target security assessment result according to the first security information, including:

[0182] In a case where the target verification result indicates that the electronic device is a secure device, the security coprocessor of the electronic device determines a target security assessment result according to the first security information.

[0183] Optionally, the method further includes:

[0184] In a case where the target verification result indicates that the electronic device is an unsafe device, the electronic device sends first indication information to the application server, where the first indication information is used to indicate that the electronic device is an unsafe device or that a security assessment of the electronic device has failed.

[0185] Optionally, the electronic device obtaining a target verification result of the electronic device includes:

[0186] The electronic device sends a verification request to the management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0187] The electronic device receives the verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

[0188] Optionally, before the electronic device sends the verification request to the management server, the method further includes:

[0189] The electronic device queries whether there is a verification result of the electronic device within the validity period in the electronic device;

[0190] In a case where a verification result of the electronic device within the validity period exists in the electronic device, the electronic device determines the verification result of the electronic device within the validity period as a target verification result;

[0191] The electronic device sends a verification request to the management server, including:

[0192] When the electronic device does not have a valid verification result of the electronic device, the electronic device sends a verification request to the management server.

[0193] Optionally, the security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0194] Optionally, the first security information also includes security status information of the trusted execution environment TEE of the electronic device or a security assessment result of the TEE.

[0195] Optionally, the first security information includes a security assessment result of the REE and security status information of the TEE;

[0196] The security coprocessor of the electronic device determines a target security assessment result according to the first security information, including:

[0197] The security coprocessor of the electronic device performs a security assessment on the TEE according to the security status information of the TEE to obtain a security assessment result of the TEE;

[0198] The security coprocessor of the electronic device determines a target security assessment result according to the security assessment result of the TEE and the security assessment result of the REE.

[0199] In this embodiment, the security coprocessor is used to perform security assessment on the TEE, which can improve the reliability of the security assessment result of the TEE compared to the security assessment performed on the TEE by the TEE itself.

[0200] Optionally, the security assessment result of the REE is a security assessment result obtained by the TEE performing a security assessment based on the security status information of the REE.

[0201] In this embodiment, the security assessment result of the REE is obtained by performing a security assessment based on the security status information of the REE by the TEE. Compared with the security assessment result of the REE obtained by performing a security assessment based on the security status information of the REE by the REE, the reliability of the security assessment result of the REE can be improved.

[0202] It should be noted that the implementation of this embodiment can refer to the relevant descriptions of the embodiments shown in Figures 1 and 3, and will not be described in detail here.

[0203] 5 , which is a flow chart of a service processing method provided in an embodiment of the present application, including the following steps:

[0204] Step 501: The application server sends a security assessment request to an electronic device, where the security assessment request is used to request an assessment of the security of the electronic device.

[0205] Step 502: The application server receives second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information, wherein the target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device, and the first digital certificate information includes a digital certificate of the electronic device or an identifier of the digital certificate of the electronic device, wherein the digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server;

[0206] Step 503: The application server determines whether to allow the electronic device to access a target service or not to allow the electronic device to access the target service based on the second security information, wherein the target service is a service provided by the application server to the electronic device.

[0207] Optionally, the application server determines, according to the second security information, whether to allow the electronic device to access a target service or not to allow the electronic device to access a target service, including:

[0208] The application server verifies the digital certificate of the management server based on the public key in the digital certificate of the management server or the target digital certificate, wherein the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate that is located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs;

[0209] If the digital certificate of the management server passes the verification, the application server verifies the digital certificate of the electronic device according to the digital certificate of the management server;

[0210] If the digital certificate of the electronic device passes the verification, the application server verifies the signature of the target security assessment result according to the digital certificate of the electronic device;

[0211] In a case where the signature of the target security assessment result passes verification, the application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service according to the target security assessment result.

[0212] Optionally, the first digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

[0213] Optionally, before the application server verifies the digital certificate of the management server according to the first digital certificate, the method further includes:

[0214] The application server determines the identifier of the digital certificate of the management server according to the digital certificate of the electronic device;

[0215] The application server obtains the digital certificate of the management server according to the identifier of the digital certificate of the management server.

[0216] It should be noted that the implementation of this embodiment can refer to the relevant descriptions of the embodiments shown in Figures 1 and 3, and will not be described in detail here.

[0217] 6 , which is a flow chart of a security information transmission method provided in an embodiment of the present application, including the following steps:

[0218] Step 601: The management server generates a digital certificate, wherein the digital certificate includes the digital certificate of the electronic device and the digital certificate of the management server, the digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server, the digital certificate of the management server is obtained by signing the public key of the management server using the private key of the management server, or is obtained by signing the public key of the management server using the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs;

[0219] Step 602: The management server sends second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device.

[0220] In some optional embodiments, the management server may receive a digital certificate generation request sent by the electronic device, and generate a digital certificate in response to the digital certificate generation reason.

[0221] Optionally, the private key of the management server is stored in a hardware security module HSM of the management server.

[0222] Optionally, the method further includes:

[0223] The management server receives a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0224] The management server verifies the security of the electronic device according to the security verification related parameters of the electronic device to obtain a verification result, wherein the verification result is used to indicate whether the electronic device is a safe device or an unsafe device;

[0225] The management server sends the verification result to the electronic device.

[0226] Optionally, the security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0227] It should be noted that the implementation of this embodiment can refer to the relevant descriptions of the embodiments shown in Figures 1 and 3, and will not be described in detail here.

[0228] The secure information transmission method provided in the embodiment of the present application can be executed by a secure information transmission device. In the embodiment of the present application, the secure information transmission device provided in the embodiment of the present application is described by taking the secure information transmission device executing the secure information transmission method as an example.

[0229] 7 , which is a schematic diagram of a security assessment device according to an embodiment of the present application. The security assessment device is applied to an electronic device. As shown in FIG7 , the security assessment device 700 includes:

[0230] A first determining module 701 is configured to determine a target security assessment result based on first security information upon receiving a security assessment request sent by an application server, wherein the first security information includes security status information of a rich execution environment (REE) of the electronic device or a security assessment result of the REE;

[0231] a decryption module 702 configured to decrypt a first ciphertext using a root key of the electronic device to obtain a private key of the electronic device, wherein the first ciphertext is a ciphertext obtained by encrypting the private key of the electronic device using the root key of the electronic device by a security coprocessor of the electronic device;

[0232] The signature module 703 is configured to sign the target security assessment result using the private key of the electronic device to obtain a signature of the target security assessment result;

[0233] The first sending module 704 is configured to send the second security information to the application server, wherein the second security information includes the target security assessment result and the signature of the target security assessment result.

[0234] Optionally, the root key is stored in a one-time programmable (OTP) memory of the electronic device.

[0235] Optionally, the root key of the electronic device is generated by the security coprocessor.

[0236] Optionally, the public-private key pair of the electronic device is generated by the security coprocessor;

[0237] The public-private key pair of the electronic device includes a private key of the electronic device and a public key corresponding to the private key of the electronic device.

[0238] Optionally, the second security information further includes first digital certificate information, where the first digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device;

[0239] The digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server.

[0240] Optionally, the first digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server;

[0241] Among them, the digital certificate of the management server is obtained by signing the public key of the management server using the private key of the management server, or by signing the public key of the management server using the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located at the upper level of the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0242] Optionally, referring to FIG8 , the device further includes:

[0243] A first obtaining module 705 is configured to obtain a target verification result of the electronic device before determining a target security assessment result according to the first security information, wherein the target verification result is a verification result obtained by a management server verifying the security of the electronic device;

[0244] The first determining module 701 is specifically configured to:

[0245] In a case where the target verification result indicates that the electronic device is a safe device, a target security assessment result is determined according to the first security information.

[0246] Optionally, referring to FIG9 , the device further includes:

[0247] The second sending module 706 is used to send first indication information to the application server when the target verification result indicates that the electronic device is an unsafe device, and the first indication information is used to indicate that the electronic device is an unsafe device or that the security assessment of the electronic device has failed.

[0248] Optionally, the first obtaining module 705 is specifically configured to:

[0249] Sending a verification request to a management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0250] Receive a verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

[0251] Optionally, referring to FIG10 , the device further includes:

[0252] A query module 707 is configured to query the electronic device for a verification result of the electronic device that is within a validity period before sending the verification request to the management server;

[0253] A second determining module 708 is configured to, if a verification result of the electronic device within the validity period exists in the electronic device, determine the verification result of the electronic device within the validity period as a target verification result;

[0254] The first acquisition module 705 is specifically configured to:

[0255] If the electronic device does not have a valid verification result for the electronic device, a verification request is sent to a management server.

[0256] Optionally, the security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0257] Optionally, the first security information also includes security status information of the trusted execution environment TEE of the electronic device or a security assessment result of the TEE.

[0258] Optionally, the first security information includes a security assessment result of the REE and security status information of the TEE;

[0259] The first determining module 701 is specifically configured to:

[0260] Performing a security assessment on the TEE based on the security status information of the TEE to obtain a security assessment result of the TEE;

[0261] A target security assessment result is determined based on the security assessment result of the TEE and the security assessment result of the REE.

[0262] Optionally, the security assessment result of the REE is a security assessment result obtained by the TEE performing a security assessment based on the security status information of the REE.

[0263] The security assessment device in the embodiment of the present application can be an electronic device, or a component in the electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal, or other devices other than a terminal. For example, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, an in-vehicle electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc., and can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., and the embodiment of the present application is not specifically limited.

[0264] The security assessment device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0265] The security assessment device provided in the embodiment of the present application can implement each process implemented in the above method embodiment. To avoid repetition, it will not be described here.

[0266] 11 is a schematic diagram of the structure of a service processing device provided in an embodiment of the present application. The service processing device is applied to an application server. As shown in FIG11 , the service processing device 1100 includes:

[0267] A third sending module 1101 is configured to send a security assessment request to an electronic device, wherein the security assessment request is used to request an assessment of the security of the electronic device;

[0268] A first receiving module 1102 is configured to receive second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information, the target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device, and the first digital certificate information includes a digital certificate of the electronic device or an identifier of the digital certificate of the electronic device, where the digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server;

[0269] The third determining module 1103 is configured to determine, based on the second security information, whether to allow the electronic device to access a target service or not, wherein the target service is a service provided by the application server to the electronic device.

[0270] Optionally, the third determining module is specifically configured to:

[0271] The digital certificate of the management server is verified according to the public key in the digital certificate of the management server or the target digital certificate, wherein the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate that is located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs;

[0272] If the digital certificate of the management server passes the verification, verifying the digital certificate of the electronic device according to the digital certificate of the management server;

[0273] If the digital certificate of the electronic device passes the verification, verifying the signature of the target security assessment result according to the digital certificate of the electronic device;

[0274] In a case where the signature of the target security assessment result passes verification, it is determined whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service according to the target security assessment result.

[0275] Optionally, the first digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

[0276] Optionally, referring to FIG12 , the device further includes:

[0277] A fourth determining module 1104 is configured to determine an identifier of the digital certificate of the management server according to the digital certificate of the electronic device before verifying the digital certificate of the management server according to the first digital certificate;

[0278] The second obtaining module 1105 is configured to obtain the digital certificate of the management server according to the identifier of the digital certificate of the management server.

[0279] The service processing device in the embodiment of the present application may be a server, or a component in the server, such as an integrated circuit or a chip.

[0280] The business processing device provided in the embodiment of the present application can implement each process implemented in the above method embodiment. To avoid repetition, it will not be described here.

[0281] Referring to FIG. 13 , FIG. 13 is a schematic diagram of the structure of a security information transmission device provided in an embodiment of the present application. The security information transmission device is applied to a management server. As shown in FIG. 13 , the security information transmission device 1300 includes:

[0282] A generation module 1301 is used to generate a digital certificate, wherein the digital certificate includes a digital certificate of the electronic device and a digital certificate of the management server, the digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server, the digital certificate of the management server is obtained by signing the public key of the management server using the private key of the management server, or is obtained by signing the public key of the management server using the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate that is located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs;

[0283] The fourth sending module 1302 is configured to send second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device.

[0284] Optionally, the second digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

[0285] Optionally, the private key of the management server is stored in a hardware security module HSM of the management server.

[0286] Optionally, referring to FIG14 , the device further includes:

[0287] A second receiving module 1303 is configured to receive a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0288] a verification module 1304, configured to verify the security of the electronic device according to security verification related parameters of the electronic device, and obtain a verification result, wherein the verification result is used to indicate whether the electronic device is a safe device or an unsafe device;

[0289] The fifth sending module 1305 is configured to send the verification result to the electronic device.

[0290] Optionally, the security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0291] The secure information transmission device in the embodiment of the present application may be a server, or a component in the server, such as an integrated circuit or a chip.

[0292] The secure information transmission device provided in the embodiment of the present application can implement each process implemented in the above method embodiment. To avoid repetition, it will not be described here.

[0293] Optionally, as shown in Figure 15, an embodiment of the present application also provides an electronic device 1500, including a processor 1501 and a memory 1502, and the memory 1502 stores a program or instruction that can be run on the processor 1501. When the program or instruction is executed by the processor 1501, the various steps of the above-mentioned security assessment method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0294] It should be noted that the electronic devices in the embodiments of the present application include mobile electronic devices and non-mobile electronic devices.

[0295] FIG16 is a schematic diagram of the hardware structure of an electronic device implementing an embodiment of the present application.

[0296] The electronic device 1600 includes, but is not limited to, a radio frequency unit 1601, a network module 1602, an audio output unit 1603, an input unit 1604, a sensor 1605, a display unit 1606, a user input unit 1607, an interface unit 1608, a memory 1609, and a processor 1610. The processor 1610 may be a security coprocessor.

[0297] Those skilled in the art will appreciate that the electronic device 1600 may further include a power source (e.g., a battery) for powering various components. The power source may be logically connected to the processor 1610 via a power management system, thereby enabling the power management system to manage charging, discharging, and power consumption. The electronic device structure shown in FIG16 does not limit the electronic device. The electronic device may include more or fewer components than shown, or may combine certain components, or have different component arrangements, which will not be described in detail here.

[0298] Among them, the processor 1610 is used to determine a target security assessment result based on first security information when receiving a security assessment request sent by an application server, wherein the first security information includes security status information of the rich execution environment (REE) of the electronic device or a security assessment result of the REE; decrypt the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, where the first ciphertext is a ciphertext obtained by encrypting the private key of the electronic device using the root key of the electronic device by the security coprocessor of the electronic device; and sign the target security assessment result using the private key of the electronic device to obtain a signature of the target security assessment result;

[0299] The radio frequency unit 1601 is configured to send second security information to the application server, where the second security information includes the target security assessment result and a signature of the target security assessment result.

[0300] Optionally, the root key is stored in a one-time programmable (OTP) memory of the electronic device.

[0301] Optionally, the root key of the electronic device is generated by the security coprocessor.

[0302] Optionally, the public-private key pair of the electronic device is generated by the security coprocessor;

[0303] The public-private key pair of the electronic device includes a private key of the electronic device and a public key corresponding to the private key of the electronic device.

[0304] Optionally, the second security information further includes first digital certificate information, where the first digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device;

[0305] The digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server.

[0306] Optionally, the first digital certificate information further includes the digital certificate of the management server or an identifier of the digital certificate of the management server;

[0307] Among them, the digital certificate of the management server is obtained by signing the public key of the management server using the private key of the management server, or by signing the public key of the management server using the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located at the upper level of the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

[0308] Optionally, the processor 1610 is further configured to, before determining the target security assessment result according to the first security information, obtain a target verification result of the electronic device, wherein the target verification result is a verification result obtained by a management server verifying the security of the electronic device;

[0309] The processor 1610 is specifically configured to:

[0310] In a case where the target verification result indicates that the electronic device is a secure device, a target security assessment result is determined by the security coprocessor according to the first security information.

[0311] Optionally, the radio frequency unit 1601 is further used to send first indication information to the application server when the target verification result indicates that the electronic device is an unsafe device, and the first indication information is used to indicate that the electronic device is an unsafe device or that the security assessment of the electronic device has failed.

[0312] Optionally, the processor 1610 is specifically configured to:

[0313] Sending a verification request to a management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device;

[0314] Receive a verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

[0315] Optionally, the processor 1610 is further configured to:

[0316] Before sending the verification request to the management server, querying the electronic device whether there is a verification result of the electronic device within the validity period;

[0317] If a verification result of the electronic device within the validity period exists in the electronic device, determining the verification result of the electronic device within the validity period as a target verification result;

[0318] If the electronic device does not have a valid verification result for the electronic device, a verification request is sent to a management server.

[0319] Optionally, the security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

[0320] Optionally, the first security information also includes security status information of the trusted execution environment TEE of the electronic device or a security assessment result of the TEE.

[0321] Optionally, the first security information includes a security assessment result of the REE and security status information of the TEE;

[0322] The processor 1610 is specifically configured to:

[0323] Performing a security assessment on the TEE based on the security status information of the TEE to obtain a security assessment result of the TEE;

[0324] A target security assessment result is determined based on the security assessment result of the TEE and the security assessment result of the REE.

[0325] Optionally, the security assessment result of the REE is a security assessment result obtained by the TEE performing a security assessment based on the security status information of the REE.

[0326] It should be understood that in an embodiment of the present application, the input unit 1604 may include a graphics processing unit (GPU) 16041 and a microphone 16042, and the graphics processor 16041 processes the image data of a static picture or video obtained by an image capture device (such as a camera) in a video capture mode or an image capture mode. The display unit 1606 may include a display panel 16061, and the display panel 16061 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 1607 includes a touch panel 16071 and at least one of other input devices 16072. The touch panel 16071 is also called a touch screen. The touch panel 16071 may include two parts: a touch detection device and a touch controller. Other input devices 16072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0327] The memory 1609 can be used to store software programs and various data. The memory 1609 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data. The first storage area may store an operating system, applications or instructions required for at least one function (such as a sound playback function, an image playback function, etc.). In addition, the memory 1609 may include a volatile memory or a non-volatile memory, or the memory 1609 may include both volatile and non-volatile memory. The non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. Volatile memory can be random access memory (RAM), static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct RAM bus random access memory (DRRAM). The memory 1609 in the embodiment of the present application includes but is not limited to these and any other suitable types of memory.

[0328] Processor 1610 may include one or more processing units. Optionally, processor 1610 integrates an application processor and a modem processor. The application processor primarily handles operations related to the operating system, user interface, and application programs, while the modem processor primarily processes wireless communication signals, such as a baseband processor. It is understood that the modem processor may not be integrated into processor 1610.

[0329] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned security assessment method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0330] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0331] Optionally, as shown in Figure 17, an embodiment of the present application also provides a server 1700, including a processor 1701 and a memory 1702, and the memory 1702 stores a program or instruction that can be run on the processor 1701. When the program or instruction is executed by the processor 1701, it implements the various steps of the above-mentioned application server-side business processing method embodiment, or implements the various steps of the above-mentioned management server-side security information transmission method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0332] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned security assessment method embodiment, or to implement the various processes of the above-mentioned business processing method embodiment, or to implement the various processes of the above-mentioned security information transmission method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0333] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0334] An embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the various processes of the above-mentioned security assessment method embodiment, or to implement the various processes of the above-mentioned business processing method embodiment, or to implement the various processes of the above-mentioned security information transmission method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0335] It should be noted that, in this article, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the statement "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element. In addition, it should be noted that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in the opposite order according to the functions involved. For example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0336] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), including a number of instructions for enabling a terminal (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0337] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of this application, ordinary technicians in this field can also make many forms without departing from the purpose of this application and the scope of protection of the claims, all of which are within the protection of this application.

Claims

1. A safety assessment method, comprising: Upon receiving a security assessment request sent by an application server, the security coprocessor of the electronic device determines a target security assessment result according to first security information, wherein the first security information includes security status information of a rich execution environment REE of the electronic device or a security assessment result of the REE; The security coprocessor of the electronic device decrypts the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, wherein the first ciphertext is the ciphertext obtained by encrypting the private key of the electronic device by the security coprocessor using the root key of the electronic device; The security coprocessor of the electronic device signs the target security assessment result using the private key of the electronic device to obtain the signature of the target security assessment result; The electronic device sends second security information to the application server, wherein the second security information includes the target security assessment result and a signature of the target security assessment result.

2. The method according to claim 1, wherein: The root key is stored in a one-time programmable (OTP) memory of the electronic device.

3. The method according to claim 1, wherein: The root key of the electronic device is generated by the security coprocessor.

4. The method according to claim 1, wherein: The public-private key pair of the electronic device is generated by the security coprocessor; The public-private key pair of the electronic device includes a private key of the electronic device and a public key corresponding to the private key of the electronic device.

5. The method according to claim 1, wherein: The second security information further includes first digital certificate information, wherein the first digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device; The digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server.

6. The method according to claim 5, wherein: The first digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server; Among them, the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located at the upper level of the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

7. The method according to any one of claims 1 to 6, wherein: Before the security coprocessor of the electronic device determines the target security assessment result according to the first security information, the method further includes: The electronic device obtains a target verification result of the electronic device, wherein the target verification result is a verification result obtained by a management server verifying the security of the electronic device; The security coprocessor of the electronic device determines a target security assessment result according to the first security information, including: In a case where the target verification result indicates that the electronic device is a secure device, the security coprocessor of the electronic device determines a target security assessment result according to the first security information.

8. The method according to claim 7, wherein: The method further comprises: In a case where the target verification result indicates that the electronic device is an unsafe device, the electronic device sends first indication information to the application server, where the first indication information is used to indicate that the electronic device is an unsafe device or that a security assessment of the electronic device has failed.

9. The method according to claim 7, wherein: The electronic device obtains a target verification result of the electronic device, including: The electronic device sends a verification request to the management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification related parameters of the electronic device; The electronic device receives a verification result sent by the management server, wherein the target verification result is the verification result sent by the management server.

10. The method according to claim 9, wherein: Before the electronic device sends a verification request to the management server, the method further includes: The electronic device queries whether there is a verification result of the electronic device within the validity period in the electronic device; In a case where a verification result of the electronic device within the validity period exists in the electronic device, the electronic device determines the verification result of the electronic device within the validity period as a target verification result; The sending of the verification request to the management server comprises: When the electronic device does not have a verification result of the electronic device within the validity period, the electronic device sends a verification request to the management server.

11. The method according to claim 10, wherein: The security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

12. The method according to any one of claims 1 to 6, wherein: The first security information also includes security status information of the trusted execution environment TEE of the electronic device or a security assessment result of the TEE.

13. The method according to claim 12, wherein: The first security information includes a security assessment result of the REE and security status information of the TEE; The security coprocessor of the electronic device determines a target security assessment result according to the first security information, including: The security coprocessor of the electronic device performs security operations on the TEE according to the security status information of the TEE. Evaluate and obtain the security evaluation result of the TEE; The security coprocessor of the electronic device determines a target security assessment result according to the security assessment result of the TEE and the security assessment result of the REE.

14. The method according to claim 13, wherein: The security assessment result of the REE is a security assessment result obtained by the TEE performing a security assessment based on the security status information of the REE.

15. A business processing method, the method comprising: The application server sends a security assessment request to the electronic device, wherein the security assessment request is used to request an assessment of the security of the electronic device; The application server receives second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information, the target security assessment result is used to indicate the security of the rich execution environment (REE) of the electronic device, and the first digital certificate information includes a digital certificate of the electronic device or an identifier of the digital certificate of the electronic device, and the digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server; The application server determines, according to the second security information, whether to allow the electronic device to access a target service or not to allow the electronic device to access a target service, wherein the target service is a service provided by the application server to the electronic device.

16. The method according to claim 15, wherein: The application server determines, according to the second security information, whether to allow the electronic device to access a target service or not to allow the electronic device to access a target service, including: The application server verifies the digital certificate of the management server according to the public key in the digital certificate of the management server or the target digital certificate, wherein the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs; When the digital certificate of the management server passes the verification, the application server verifies the digital certificate of the electronic device according to the digital certificate of the management server; In the case where the digital certificate of the electronic device passes the verification, the application server verifies the signature of the target security assessment result according to the digital certificate of the electronic device; In the case that the signature of the target security assessment result passes the verification, the application server determines whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service according to the target security assessment result.

17. The method according to claim 16, wherein: The first digital certificate information also includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

18. The method according to claim 16, wherein: Before the application server verifies the digital certificate of the management server according to the first digital certificate, the method further includes: The application server determines the identifier of the digital certificate of the management server according to the digital certificate of the electronic device; The application server obtains the digital certificate of the management server according to the identifier of the digital certificate of the management server.

19. A method for transmitting secure information, the method comprising: The management server generates a digital certificate, wherein the digital certificate includes the digital certificate of the electronic device and the digital certificate of the management server, the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server, the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs; The management server sends second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device.

20. The method according to claim 19, wherein: The second digital certificate information also includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

21. The method according to claim 19 or 20, wherein: The private key of the management server is stored in the hardware security module HSM of the management server.

22. The method according to claim 19 or 20, wherein: The method further comprises: The management server receives a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification related parameters of the electronic device; The management server verifies the security of the electronic device according to the security verification related parameters of the electronic device to obtain a verification result, wherein the verification result is used to indicate whether the electronic device is a safe device or an unsafe device; The management server sends the verification result to the electronic device.

23. The method according to claim 22, wherein: The security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

24. A security assessment device, applied to an electronic device, comprising: A first determination module is used to determine a target security assessment result according to first security information when receiving a security assessment request sent by an application server, wherein the first security information includes security status information of a rich execution environment REE of the electronic device or a security assessment result of the REE; A decryption module is used to decrypt the first ciphertext using the root key of the electronic device to obtain the private key of the electronic device, wherein the first ciphertext is a decryption module of the security coprocessor of the electronic device using the root key of the electronic device. A ciphertext obtained by encrypting the private key of the electronic device with the key; A signature module, used to sign the target security assessment result using the private key of the electronic device to obtain the signature of the target security assessment result; The first sending module is used to send second security information to the application server, wherein the second security information includes the target security assessment result and a signature of the target security assessment result.

25. The device according to claim 24, wherein: The root key is stored in a one-time programmable (OTP) memory of the electronic device.

26. The device according to claim 24, wherein: The root key of the electronic device is generated by the security coprocessor.

27. The device according to claim 24, wherein: The public-private key pair of the electronic device is generated by the security coprocessor; The public-private key pair of the electronic device includes a private key of the electronic device and a public key corresponding to the private key of the electronic device.

28. The device according to claim 24, wherein: The second security information further includes first digital certificate information, wherein the first digital certificate information includes the digital certificate of the electronic device or an identifier of the digital certificate of the electronic device; The digital certificate of the electronic device is obtained by signing the public key of the electronic device using the private key of the management server.

29. The device according to claim 28, wherein The first digital certificate information also includes the digital certificate of the management server or the identifier of the digital certificate of the management server; Among them, the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate. The target digital certificate is a digital certificate located at the upper level of the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs.

30. The device according to any one of claims 24 to 29, wherein: The device also includes: A first acquisition module, configured to acquire a target verification result of the electronic device before determining a target security assessment result according to the first security information, wherein the target verification result is a verification result obtained by a management server verifying the security of the electronic device; The first determining module is specifically used for: In a case where the target verification result indicates that the electronic device is a safe device, a target security assessment result is determined according to the first security information.

31. The device according to claim 30, wherein The device also includes: a second sending module, configured to send first indication information to the application server when the target verification result indicates that the electronic device is an unsafe device, wherein the first indication information is used to indicate that the electronic device is unsafe; The electronic device is deemed to be an unsafe device or the safety assessment of the electronic device fails.

32. The device according to claim 30, wherein: The first acquisition module is specifically used for: Sending a verification request to a management server, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification-related parameters of the electronic device; A verification result sent by the management server is received, wherein the target verification result is the verification result sent by the management server.

33. The device according to claim 32, wherein: The device also includes: A query module, used for querying whether there is a verification result of the electronic device within the validity period in the electronic device before sending the verification request to the management server; A second determination module is configured to determine the verification result of the electronic device within the validity period as a target verification result when there is a verification result of the electronic device within the validity period in the electronic device; The first acquisition module is specifically used for: When the electronic device does not have a verification result of the electronic device within the validity period, a verification request is sent to a management server.

34. The device according to claim 33, wherein The security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

35. The device according to any one of claims 24 to 29, wherein: The first security information also includes security status information of the trusted execution environment TEE of the electronic device or a security assessment result of the TEE.

36. The device according to claim 35, wherein The first security information includes a security assessment result of the REE and security status information of the TEE; The first determining module is specifically used for: Performing a security assessment on the TEE according to the security status information of the TEE to obtain a security assessment result of the TEE; A target security assessment result is determined according to the security assessment result of the TEE and the security assessment result of the REE.

37. The device according to claim 36, wherein The security assessment result of the REE is a security assessment result obtained by the TEE performing a security assessment based on the security status information of the REE.

38. A service processing device, applied to an application server, comprising: A third sending module, used to send a security assessment request to the electronic device, wherein the security assessment request is used to request an assessment of the security of the electronic device; The first receiving module is used to receive second security information from the electronic device, wherein the second security information includes a target security assessment result, a signature of the target security assessment result, and first digital certificate information, the target security assessment result is used to indicate the security of the rich execution environment REE of the electronic device, the first digital certificate information includes a digital certificate of the electronic device or an identifier of the digital certificate of the electronic device, and the electronic device The digital certificate of the sub-device is obtained by signing the public key of the electronic device using the private key of the management server; A third determination module is used to determine whether to allow the electronic device to access a target service or not to allow the electronic device to access a target service according to the second security information, wherein the target service is a service provided by the application server to the electronic device.

39. The device according to claim 38, wherein The third determination module is specifically used for: The digital certificate of the management server is verified according to the public key in the digital certificate of the management server or the target digital certificate, wherein the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs; If the digital certificate of the management server passes the verification, verifying the digital certificate of the electronic device according to the digital certificate of the management server; If the digital certificate of the electronic device passes the verification, verifying the signature of the target security assessment result according to the digital certificate of the electronic device; In the case that the signature of the target security assessment result passes the verification, it is determined whether to allow the electronic device to access the target service or not to allow the electronic device to access the target service according to the target security assessment result.

40. The device according to claim 39, wherein The first digital certificate information also includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

41. The apparatus of claim 39, wherein: The device also includes: A fourth determining module, configured to determine the identifier of the digital certificate of the management server according to the digital certificate of the electronic device before verifying the digital certificate of the management server according to the first digital certificate; The second acquisition module is used to acquire the digital certificate of the management server according to the identifier of the digital certificate of the management server.

42. A secure information transmission device, applied to a management server, comprising: A generation module, used to generate a digital certificate, wherein the digital certificate includes a digital certificate of the electronic device and a digital certificate of the management server, the digital certificate of the electronic device is obtained by signing the public key of the electronic device with the private key of the management server, the digital certificate of the management server is obtained by signing the public key of the management server with the private key of the management server, or is obtained by signing the public key of the management server with the private key corresponding to the public key of the target digital certificate, and the target digital certificate is a digital certificate located one level above the digital certificate of the management server in the digital certificate chain to which the digital certificate of the management server belongs; The fourth sending module is used to send second digital certificate information to the electronic device, wherein the second digital certificate information includes the digital certificate of the electronic device or the identifier of the digital certificate of the electronic device.

43. The device according to claim 42, wherein: The second digital certificate information also includes the digital certificate of the management server or an identifier of the digital certificate of the management server.

44. The device according to claim 42 or 43, wherein: The private key of the management server is stored in the hardware security module HSM of the management server.

45. The device according to claim 42 or 43, wherein: The device also includes: A second receiving module, configured to receive a verification request sent by the electronic device, wherein the verification request is used to request verification of the security of the electronic device, and the verification request includes security verification related parameters of the electronic device; A verification module, used to verify the security of the electronic device according to the security verification related parameters of the electronic device, and obtain a verification result, wherein the verification result is used to indicate whether the electronic device is a safe device or an unsafe device; A fifth sending module is used to send the verification result to the electronic device.

46. ​​The device according to claim 45, wherein The security verification related parameters of the electronic device include at least one of the following: device fingerprint, hardware configuration parameters, firmware configuration parameters, firmware version, system configuration parameters, and system version.

47. An electronic device comprising a processor and a memory, wherein the memory stores programs or instructions that can be executed on the processor, and when the program or instructions are executed by the processor, the steps of the security assessment method as described in any one of claims 1 to 14 are implemented.

48. A management server, comprising a processor and a memory, wherein the memory stores programs or instructions that can be executed on the processor, and when the programs or instructions are executed by the processor, the steps of the security assessment method according to any one of claims 15 to 18 are implemented.

49. An application server comprising a processor and a memory, wherein the memory stores programs or instructions that can be executed on the processor, and when the programs or instructions are executed by the processor, the steps of the security assessment method according to any one of claims 19 to 23 are implemented.

50. A readable storage medium storing a program or instruction, wherein the program or instruction, when executed by a processor, implements the steps of the security assessment method as described in any one of claims 1 to 14, or implements the steps of the security assessment method as described in any one of claims 15 to 18, or implements the steps of the security assessment method as described in any one of claims 19 to 23.

51. An electronic device, comprising: the electronic device being configured to execute the steps of the security assessment method as described in any one of claims 1-14, or to implement the steps of the security assessment method as described in any one of claims 15-18, or to implement the steps of the security assessment method as described in any one of claims 19-23.

52. A chip comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the steps of the security assessment method as described in any one of claims 1 to 14, or to implement the steps of the security assessment method as described in any one of claims 15 to 18, or to implement the steps of the security assessment method as described in any one of claims 19 to 23.

53. A computer program product, wherein the computer program product is stored in a non-volatile storage medium, and wherein the computer program product is executed by at least one processor to implement the steps of the security assessment method as described in any one of claims 1 to 14, or to implement the steps of the security assessment method as described in any one of claims 15 to 18, or to implement the steps of the security assessment method as described in any one of claims 19 to 23.

Images