Multi-node authentication method for trusted execution environment

Abstract

The invention discloses a trusted execution environment (TEE) multi-node authentication method, which comprises the following steps of: assuming that a plurality of TEE computing nodes form a computing resource pool, and uniformly distributing computing resources by a computing resource management system; and setting a unified access and authentication node (AuthNode) for the the resource pool, wherein the node assists a user in completing the remote authentication process of all distributed TEE computing nodes. The method has the following advantages: 1, a user can authenticate the code security in the cloud computing environment, and realizes security protection on the computing process through the TEE; 2, the privacy protection of user data can be achieved, the user data are uploaded to the cloud environment in an encrypted state, and the data are only decrypted and used in the TEE; 3, the user can authenticate the correctness of the calculation result to ensure that the calculation result is not tampered; and 4, complete remote authentication is only carried out in a program deployment stage, the TEE authentication process is completed in the cloud environment, the user only needs to carry out simple local verification in the calculation process, and the execution efficiency is high.

Description

technical field [0001] The invention relates to the fields of trusted execution environment, cloud environment, remote authentication and privacy protection, in particular to a multi-node authentication method of trusted execution environment. Background technique [0002] Trusted Executive Environment (TEE) is a secure computing framework that implements data security protection by setting a hardware-based security zone in a general-purpose CPU. Native security protection against tampering or theft. Different from traditional simple security chips, TEE can realize the general computing function supported by CPU. In the traditional CPU+security chip architecture, the security chip provides functions such as encryption, signature, and authentication, and the CPU implements general-purpose computing, so the data in the CPU cannot be effectively protected. In TEE, general computing, encryption, authentication and other functions are all completed inside the CPU, and the encry...

AI Technical Summary

Problems solved by technology

In order to solve this problem, cryptographic tools such as fully homomorphic encryption algorithms can be used, but such algorithms have the problem of low efficiency and cannot provide high-performance and practical solutions

Images