Key protection method and device

Abstract

The application discloses a key protection method and device, and belongs to the technical field of network security. In the application, user equipment sends a key identifier of at least one user keyto a server, so that a user application running on the server can transmit an operation parameter set including a corresponding key identifier to an execution node in a secure execution space when anoperation using the user key is initiated. The secure execution space is configured to be capable of preventing external access to a privilege-level code, so that an internal execution node can acquire the user key in a key library through the key identifier when the privilege-level code is invisible so as to perform the abovementioned operation using the user key and return an execution result.The user key and a key operation process are packaged within the secure execution space, so that the security threat to the user key caused by privileged software in a cloud server can be lowered.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a key protection method and device. Background technique [0002] Virtualization technology is one of the key technologies in the field of cloud computing, which can virtualize the physical resources of a physical computer into multiple virtual machines (Virtual Machine, VM), such as a virtualization platform of a virtual machine monitor (Virtual Machine Monitor, VMM). The physical resources are provided to each virtual machine in the form of a virtual resource pool, and different operating systems (Operating System, OS) are run on different virtual machines to be allocated to multiple users, and the physical resources of the physical computer are shared among the virtual machines . [0003] In the cloud service scenario, cloud service providers can provide cloud service services to a large number of users and allocate virtual machines to users. During the us...

AI Technical Summary

Problems solved by technology

For example, a malicious administrator of a cloud service provider may steal the keys used by user applications through management tools or management domains, and malicious virtual machines may also use technical means to attack other virtual machines on the same physical server to steal keys used by user applications

In addition, hackers may also exploit security holes in VMM and OS to invade cloud servers and steal keys used by user applications.

[0005] It can be seen that under the current cloud service architecture, the user's private key is easily leaked to the privileged software running on the cloud server, which seriously threatens the integrity of the user's data and business

Images