The invention discloses an auditing
key management method based on a trusted execution environment, which comprises the following steps that: a
data provider encrypts
original data by using k to obtain a
ciphertext C, and calculates a hash value id of the C; t; id, kgt; storing the result in association locally, and storing the result; d, Cgt; uploading to a
cloud server; the
data provider formulates and signs a data use strategy, the data processor formulates and signs a
data processing strategy, and the data use strategy and the
data processing strategy are both sent to the
security service program of the trusted execution environment; verifying the signature and the
authorization state of the
processing strategy, and sending a key request and a remote
authentication report to a
data provider; after the data provider remotely verifies the remote report, if the request is agreed, the key k is sent to the
security service program through the security channel, and a key use
record is stored in the block chain; and the
security service program downloads the
ciphertext C, decrypts the data after
verification, executes
processing operation, and returns an
encryption result to a specified
receiver. According to the invention, real-time auditing and evidence storage can be carried out on the use process of the secret key, and cross-domain management and control of data can be realized.