WO2020252617A1

WO2020252617A1 - Data processing method, apparatus and system

Info

Publication number: WO2020252617A1
Application number: PCT/CN2019/091495
Authority: WO
Inventors: 唐虹刚; 李升林; 孙立林
Original assignee: 云图有限公司
Priority date: 2019-06-17
Filing date: 2019-06-17
Publication date: 2020-12-24

Abstract

Disclosed in embodiments of the present description are a data processing method, apparatus and system. The system comprises a key generation server, a terminal device, and a data providing server. The terminal device is provided with a TEE and a security module. The data providing server encrypts data on the basis of a public key, the public key being pre-generated by the key generation server. The TEE receives the data encrypted on the basis of the public key, and initiates secure multi-party computation. The TEE and the security module jointly perform secure multi-party computation using a first private key component stored in the TEE and a second private key component stored in the security module to obtain a private key, wherein the first private key component and the second private key component are obtained by the TEE by splitting the private key sent by the key generation server after receiving same. The TEE performs decryption processing on the encrypted data using the private key obtained by the secure multi-party computation. The embodiments of the present description can enhance the security of data processing by TEE hardware.

Description

Data processing method, device and system

Technical field

The present invention relates to the technical field of computer data processing, and in particular, to a data processing method, device and system for improving the security of a trusted execution environment.

Background technique

The Trusted Execution Environment (TEE) hardware security environment technology in the terminal device CPU has been increasingly applied to the production environment. At present, due to the inherent flaws in the design of the CPU architecture, security processes such as blockchain, AI, and big data processing all rely on the trusted execution environment (TEE) that comes with the CPU, but the TEE technology only uses a single built-in private inside the hardware. Once the key is stolen, the data will face the risk of total theft. For example, the use of CPU security vulnerabilities such as Spectre/Meltdown/Foreshadow can steal data, and even steal the root key (PRIVATE KEY) of TEE, which leads to the risk of comprehensive data leakage. At present, the above problems cannot be solved by simple software patches. . Therefore, how to strengthen the hardware TEE environment security has become an urgent technical problem to be solved.

Summary of the invention

The purpose of the embodiments of this specification is to provide a data processing method, device, and system that can enhance the security of hardware data processing in a trusted execution environment.

This specification provides a data processing method, device and system which are implemented in the following ways:

A data processing system, the system includes a key generation server, a terminal device, and a data providing server. The terminal device is provided with a trusted execution environment and a security module;

The data providing server is configured to encrypt data based on a public key and send the encrypted data to a terminal device, and the public key is generated in advance by the key generation server and sent to the data providing server;

The trusted execution environment of the terminal device is used to receive encrypted data sent by the data providing server and initiate secure multi-party computing;

The trusted execution environment and the security module are used to jointly perform secure multi-party calculations using the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key. The first private key component and the second private key component are obtained by the trusted execution environment after receiving the private key sent by the key generation server;

The trusted execution environment is used to decrypt the encrypted data by using the private key obtained by secure multi-party calculation.

In another embodiment of the system provided in this specification, the key generation server is used to generate a public key and a private key, and send the public key to the data providing server according to the request of the data providing server , And sending the private key to the trusted execution environment of the terminal device according to the request of the terminal device;

Correspondingly, the trusted execution environment of the terminal device is used to split the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in the trusted In the execution environment, the second private key component of the at least two private key components is stored in the security module.

In another embodiment of the system provided in this specification, the key generation server is further configured to generate a public key and a private key when a key update request is received, and the key update request is issued by the terminal device and/or The data providing server sends based on a preset time interval or a data exchange dialogue, and the key update request includes the terminal device ID and the data provider information corresponding to the data providing server;

Correspondingly, the key generation server is further configured to send the public key to the data providing server according to the data provider information, and send the private key to the terminal device according to the terminal device ID. surroundings.

In another embodiment of the system provided in this specification, the key generation server is further configured to encrypt the private key based on a preset encryption algorithm and send it to the trusted execution environment of the terminal device;

Correspondingly, the trusted execution environment is configured to receive the private key encrypted based on a preset encryption algorithm sent by the key generation server, and perform the encryption based on the preset encryption algorithm based on the decryption algorithm corresponding to the preset encryption algorithm. The private key is decrypted to obtain the private key.

On the other hand, the embodiment of this specification also provides a data processing method applied to a trusted execution environment, and the method includes:

Receiving data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generating server and sent to the data providing server;

Perform secure multi-party calculation based on the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key, wherein the first private key component and the second private key component After the trusted execution environment receives the private key sent by the key generation server, it is split and obtained;

The private key obtained by secure multi-party calculation is used to decrypt the data encrypted based on the public key.

In another embodiment of the method provided in this specification, before the receiving the data based on public key encryption sent by the data providing server, the method further includes:

Send a key update request to the key generation server based on a preset time interval or a data request from the data providing server, so that the key generation server generates a private key and a public key according to the key update request, and the key update request includes Terminal device ID and data providing server information;

Receiving the private key sent by the key generation server, and splitting the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in the In the letter execution environment, the second private key component of the at least two private key components is stored in the security module.

Receiving the private key encrypted based on the preset encryption algorithm sent by the key generation server, and decrypting the private key encrypted based on the preset encryption algorithm based on the decryption algorithm corresponding to the preset encryption algorithm to obtain the private key;

Split the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in a trusted execution environment, and The second private key component is stored in the security module.

On the other hand, the embodiments of this specification also provide a data processing device, which is applied to a trusted execution environment, and the device includes:

The first data receiving module is configured to receive data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generating server and sent to the data providing server;

The secure multi-party calculation module is used to perform secure multi-party calculation based on the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain a private key, wherein the first private key The component and the second private key component are obtained by splitting the trusted execution environment after receiving the private key sent by the key generation server;

The decryption module is used to decrypt the data encrypted based on the public key by using the private key obtained by secure multi-party calculation.

On the other hand, the embodiment of the present specification also provides a data processing device, including a processor and a memory for storing executable instructions of the processor, the instructions being executed by the processor include the following steps: Sent data encrypted based on a public key, the public key being generated in advance by the key generation server and sent to the data providing server;

On the other hand, the embodiments of this specification also provide a terminal device, the terminal device includes a trusted execution environment and a security module, wherein a first private key component is stored in the trusted execution environment, and the security module A second private key component is stored, and the first private key component and the second private key component are obtained by splitting the trusted execution environment after receiving the private key sent by the key generation server;

The trusted execution environment is used to receive data encrypted based on a public key sent by a data providing server, where the public key is pre-generated by the key generation server and sent to the data providing server;

The trusted execution environment and the security module are configured to use the first private key component and the second private key component to jointly perform secure multi-party calculations to obtain a private key;

The trusted execution environment is also used to decrypt the data encrypted based on the public key by using the private key obtained by secure multi-party calculation.

According to the data processing method, device and system provided by one or more embodiments of this specification, after receiving the private key sent by the key generation server, the TEE of the terminal device can split the private key into at least two components, one of which is Stored in the TEE, and the remaining components are encrypted and stored in the security module of the terminal device that is specially used to store the key. By further splitting the private key, a part of the private key component is encrypted and stored on a more secure security module for storage. In actual application, the method of secure multi-party calculation is used again, and the other private key component does not leave the security module On the basis of, the recovery of the private key can be realized, which can reduce the risk of the theft of TEE data.

Description of the drawings

In order to more clearly explain the technical solutions in the embodiments of this specification or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments described in this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor. In the attached picture:

Figure 1 is a schematic diagram of the key generation and distribution stage in an embodiment provided in this specification;

Figure 2 is a schematic diagram of the key use phase in another embodiment provided in this specification;

Figure 3 is a schematic flow diagram of a data processing method applied to TEE provided in this specification;

Figure 4 is a schematic diagram of the module structure of a data processing device applied to TEE provided in this specification.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions in this specification, the following will make clear and complete the technical solutions in one or more embodiments of this specification in conjunction with the drawings in one or more embodiments of this specification. It is obvious that the described embodiments are only a part of the embodiments in the specification, rather than all the embodiments. Based on one or more embodiments of the specification, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of the embodiment scheme of this specification.

The trusted execution environment (TEE) hardware security environment technology in the terminal device CPU has been increasingly applied to the production environment. Due to the inherent flaws in the design of the CPU architecture, security processes such as blockchain, AI, and big data processing all rely on the trusted execution environment (TEE) that comes with the CPU, but the TEE technology uses only a single built-in private key inside the hardware. , Once the key is stolen, the data will face the risk of total theft. For example, the use of CPU security vulnerabilities such as Spectre/Meltdown/Foreshadow can steal data, and even steal the root key (PRIVATE KEY) of TEE, which leads to the risk of comprehensive data leakage. At present, the above problems cannot be solved by simple software patches. .

Correspondingly, the embodiment of this specification provides a data processing system that can enhance the security of the hardware TEE environment. The data processing system may include a terminal device, a key generation server, and a data providing server. The terminal device is provided with a trusted execution Environment (TEE) and safety modules. After the TEE of the terminal device receives the private key sent by the key generation server, it can split the private key into at least two components, one of which is stored in the TEE, and the remaining components are encrypted and stored in the terminal device to save the secret. Key in the security module. By further splitting the private key, a part of the private key component is encrypted and stored on a more secure security module for storage. In actual application, the method of secure multi-party calculation is used again, and the other private key component does not leave the security module On the basis of, the recovery of the private key can be realized, which can reduce the risk of the theft of TEE data.

The key generation server can be used to generate a private key and a public key pair. The data providing server may be a server of a data provider corresponding to an application running on the terminal device. The server described in the embodiment of this specification may be a single server or a server cluster, which is not limited here. The terminal device may be a device with data processing and data communication functions, such as a mobile phone (also referred to as a "cellular phone"), a cordless phone, a handheld device, a vehicle-mounted device, a wearable device, and so on. The trusted execution environment (TEE) can be an operating environment for providing security services in a terminal device. The TEE can use all the performance of the CPU while it is running, and at the same time ensure the running security of the application. The security module may be an SE (Secure Element) or a file system specially used for key encryption storage in a mobile terminal. The SE may be a micro-computing processing module that implements functions such as data secure storage, encryption and decryption operations, etc. through a security chip and a chip operating system.

In one or more embodiments of this specification, the system may include a key generation server, a terminal device, and a data providing server, and the terminal device is provided with a trusted execution environment and a security module;

The data providing server may be used to encrypt data based on a public key and send the encrypted data to a terminal device, and the public key is generated in advance by the key generation server and sent to the data providing server;

The trusted execution environment of the terminal device may be used to receive encrypted data sent by the data providing server and initiate secure multi-party computing;

The trusted execution environment and the security module can be used to jointly perform secure multi-party calculations using the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key, where: The first private key component and the second private key component are obtained by the trusted execution environment after receiving the private key sent by the key generation server;

The trusted execution environment may be used to decrypt the encrypted data using the private key obtained by secure multi-party calculation.

Before using the public key and private key pair to perform data transmission processing, the key generation server may complete key generation in advance to obtain a public key and private key pair. Fig. 1 shows a schematic diagram of the key generation and distribution stages provided in one or more embodiments of this specification. As shown in Figure 1, the key generation server can be used to generate a private key SK and a public key PK, and send the generated private key to the TEE of the terminal device. After receiving the private key, the TEE can split the private key into at least two components, store one of the components in the TEE, and encrypt the remaining components by the security module.

The security module may be one, two or more than two. In some embodiments, when there is one security module, if the security module is an SE, the TEE can split the private key into two parts, one is stored locally, and the other is sent to the SE for encrypted storage. When there are two or more security modules, the TEE can split the private key into two or more parts, one part is stored locally, and the remaining parts are sent to different security modules for encrypted storage.

As shown in Figure 1, TEE can split the private key SK into two parts, namely the first private key component SK1 and the second private key component SK2, and then store SK1 locally and send SK2 to the SE or file system Encrypted storage. It should be noted that the first private key component and the second private key component in the embodiments of this specification are only defined for distinguishing expressions, and are not a limitation on the data difference between the two. The difference between the two data can be based on actual conditions. Need to be set, there is no limit here. The way to encrypt SK2 can be cipher algorithms such as AES, DES, 3DES, RSA, etc., which is not limited here.

Corresponding to the solution provided in the above-mentioned embodiment, in an embodiment of this specification, the key generation server can be used to generate a public key and a private key, and send the public key to the public key according to the request of the data providing server. The data providing server, and the trusted execution environment that sends the private key to the terminal device according to the request of the terminal device;

The terminal device may be used to split the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in a trusted execution environment, and the at least The second private key component of the two private key components is stored in the security module.

In another embodiment of this specification, the key generation server may also be used to encrypt the private key based on a preset encryption algorithm and send it to the trusted execution environment of the terminal device. After the key generation server generates the private key and the public key, it may also encrypt the private key based on a preset encryption algorithm, and then send the encrypted private key to the trusted execution environment of the terminal device for further To improve the security of private key data transmission, the type of the preset encryption algorithm is not limited. Correspondingly, after receiving the encrypted private key, the trusted execution environment of the terminal device can perform decryption processing based on the decryption algorithm corresponding to the preset encryption algorithm to obtain the private key, and then perform the distribution processing based on the aforementioned distribution mechanism.

Figure 2 shows a schematic diagram of a key use phase provided in one or more embodiments of this specification. As shown in FIG. 2, in actual application, the key generation server may send the public key to the data providing server based on the data request, so that the data providing server uses the public key to encrypt data. In some embodiments, the key generation server may send the public key corresponding to the terminal device ID to the data providing server based on the terminal device ID sent by the data providing server.

As shown in FIG. 2, when the data providing server performs data transmission with the terminal device, the data to be transmitted can be encrypted based on the public key and sent to the terminal device. The TEE of the terminal device can initiate a secure multi-party calculation after receiving the data based on public key encryption sent by the data providing server. The TEE and the security module can use the first private key component SK1 stored in the TEE and the second private key component SK2 stored in the security module such as the file system to jointly perform secure multi-party calculations to complete the recovery of the private key SK.

In some embodiments, the TEE can initiate a secure multi-party calculation to the security module, and the security module can decrypt the second private key component SK2 after receiving the information. Then, the TEE can perform secure multi-party calculations in conjunction with the security module to realize the recovery of the private key SK. Since secure multi-party computing requires more computing resources, in actual use, the implementation process of secure multi-party computing can be implemented by software or hardware.

In some embodiments, Secure Muti-Party Computation (MPC) is an algorithm for protecting data privacy and security. Multiple participants can use secure multi-party computing technology to perform collaborative calculations and obtain calculation results without leaking their own data. For example, using secure multi-party computing technology, the participants P ₁ ,..., P _n can cooperate to calculate the function y=f(x ₁ ,..., x _n ). Among them, n≥2; x ₁ ,...,x _n are the data of the participants P ₁ ,...,P _n ; y is the calculation result. One of the participating parties P ₁ ,..., P _n or all parties can obtain the calculation result y.

As mentioned earlier, through the key generation and distribution process, the TEE and the security module of the terminal device can obtain different private key components respectively. In this way, the TEE may use the first private key component SK1 as an input parameter, and the security module may use the second private key component SK2 as an input parameter after the decryption process, and use secure multi-party computing technology to perform collaborative calculations. Correspondingly, the calculation result can be obtained: the key SK.

Compared with only storing the private key on the TEE, this embodiment can further split the private key, encrypt a part of the private key components and store it on a more secure security module for storage. In actual applications, the security is reused. The multi-party calculation method realizes the recovery of the private key on the basis that the other private key component does not leave the security module, thereby reducing the risk of TEE data being stolen.

In another embodiment of this specification, the key generation server may also be used to generate a public key and a private key when receiving a key update request, which is based on the terminal device and/or the data providing server The key update request includes the terminal device ID and data providing server information; correspondingly, the key generation server can also be used to send the public key according to the data providing server information. Provide the data to the server and send the private key to the trusted execution environment of the terminal device according to the terminal device ID. In this embodiment, the security of data processing can be further improved by adopting the form of applying for a new key at an interval of a period of time or each data interactive dialogue.

In some embodiments, the terminal device and/or the data providing server may update the key at regular intervals, and send a key update request to the key generation server to request the key generation server to generate new public and private keys. Correct. Then, the key generation server can send the new private key to the terminal device according to the terminal device ID, and the trusted execution environment of the terminal device can be distributed and stored according to the mechanism of the above-mentioned embodiment. At the same time, the key generation server may publish the new public key to the data providing server according to the data providing server information, or send the new public key to the data providing server based on the request of the data providing server.

In other embodiments, corresponding to each data exchange dialogue between the data providing server and the terminal device, the data providing server and/or the terminal device may send a key update request to the key generation server, and the key generation server will receive the After the request, a new public key and private key pair can be generated, and then the public key can be sent to the data providing server corresponding to the data interaction dialog, and the private key can be sent to the terminal device corresponding to the data interaction dialog.

For example, the terminal device may send a key update request to the key generation server, and the key update request may include the terminal device ID, the data providing server information corresponding to this data exchange session, and so on. After receiving the key update request, the key generation server may generate a public key and private key pair, and then send the private key to the terminal device corresponding to the ID according to the terminal device ID. After receiving the private key, the TEE of the terminal device completes the split and encrypted storage of the private key according to the above mechanism. The key generation server may also send the public key to the data providing server according to the information of the data providing server, or send the public key corresponding to the terminal device ID to the data providing server according to the request of the data providing server.

Correspondingly, after receiving the public key, the data providing server can encrypt the data to be transmitted based on the public key, and then send it to the terminal device. After receiving the encrypted data, the TEE of the terminal device can initiate secure multi-party calculation. Then, the TEE and the security module can use the first private key component in the TEE and the second private key component in the security module to jointly perform secure multi-party calculations to complete the recovery of the private key SK. Further, the TEE can use the private key obtained after the recovery to decrypt the data encrypted by the public key.

Using the various embodiments of the present specification, even if the private key data in the TEE is stolen, there will be no risk of total data loss, thereby greatly improving the security of data processing based on the hardware TEE.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. For details, reference may be made to the description of the foregoing related processing related embodiments, which will not be repeated here.

The foregoing describes specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims may be performed in a different order than in the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown to achieve the desired result. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

In the data processing system provided by one or more embodiments of this specification, by further splitting the private key, a part of the private key components are encrypted and stored in a more secure security module for storage. In actual application, the secure multi-party The calculation method realizes the recovery of the private key on the basis that the other private key component does not leave the security module, thereby reducing the risk of the theft of TEE data.

Figure 3 shows a schematic flow chart of a data processing method provided in this specification. As shown in FIG. 3, another embodiment of this specification also provides a data processing method applied to a trusted execution environment, and the method may include:

S102: Receive data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generating server and sent to the data providing server;

S104: Perform secure multi-party calculation based on the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key, wherein the first private key component and the second private key component The key component is obtained by splitting the trusted execution environment after receiving the private key sent by the key generation server;

S106: Use the private key obtained by secure multi-party calculation to decrypt the data encrypted based on the public key.

Preferably, in another embodiment of this specification, before said receiving the data based on public key encryption sent by the data providing server, it may further include:

For the specific implementation of one or more of the foregoing embodiments, reference may be made to the description of the foregoing related processing embodiments, and details are not repeated here.

In the data processing method provided by one or more embodiments of this specification, by further splitting the private key, a part of the private key component is encrypted and stored in a more secure security module for storage. In actual application, the secure multi-party The calculation method realizes the recovery of the private key on the basis that the other private key component does not leave the security module, thereby reducing the risk of the theft of TEE data.

Based on the data processing method described above, one or more embodiments of this specification also provide a data processing device. Since the implementation scheme of the device to solve the problem is similar to the method, the implementation of the specific device in the embodiment of this specification can refer to the implementation of the foregoing method, and the repetition will not be repeated. As used below, the term "unit" or "module" can be a combination of software and/or hardware that implements predetermined functions. Although the devices described in the following embodiments are preferably implemented by software, hardware or a combination of software and hardware is also possible and conceived. Specifically, FIG. 4 shows a schematic diagram of the module structure of an embodiment of a data processing device provided in the specification. As shown in FIG. 4, another embodiment of this specification also provides a data processing device, which is applied in a trusted execution environment, The device may include:

The first data receiving module 202 may be used to receive data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generating server and sent to the data providing server;

The secure multi-party computing module 204 can be used to perform secure multi-party computing based on the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key. The private key component and the second private key component are obtained by the trusted execution environment after receiving the private key sent by the key generation server;

The decryption module 206 may be used to decrypt the data encrypted based on the public key by using the private key obtained by secure multi-party calculation.

In another embodiment of the present specification, the device may further include:

The key update request module can be used to send a key update request to the key generation server based on a preset time interval or a data request from the data providing server, so that the key generation server generates a private key and a public key according to the key update request. The key, the key update request includes the terminal device ID and data providing server information;

The second data receiving module may be used to receive the private key sent by the key generation server, and split the private key into at least two private key components, where the at least two private key components The first private key component of is stored in the trusted execution environment, and the second private key component of the at least two private key components is stored in the security module. In another embodiment of the present specification, the device may further include:

The third data receiving module may be used to receive the private key encrypted based on the preset encryption algorithm sent by the key generation server, and perform the encryption on the private key encrypted based on the preset encryption algorithm based on the decryption algorithm corresponding to the preset encryption algorithm Decryption processing to obtain the private key;

The key distribution module may be used to split the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in a trusted execution environment, and The second private key component of the at least two private key components is stored in the security module.

It should be noted that the above-mentioned device may also include other implementation manners according to the description of the method embodiment. For specific implementation manners, reference may be made to the description of the related method embodiments, which will not be repeated here.

In the data processing device provided by one or more embodiments of this specification, by further splitting the private key, a part of the private key component is encrypted and stored in a more secure security module for storage. In actual application, the secure multi-party The calculation method realizes the recovery of the private key on the basis that the other private key component does not leave the security module, thereby reducing the risk of the theft of TEE data.

The method or device described in the foregoing embodiment provided in this specification can implement business logic through a computer program and record it on a storage medium, and the storage medium can be read and executed by a computer to achieve the effects of the solution described in the embodiment of this specification. Therefore, this specification also provides a data processing device including a processor and a memory storing executable instructions of the processor. When the instructions are executed by the processor, the implementation includes the following steps:

It should be noted that the above-mentioned device may also include other implementation modes according to the description of the method embodiment. For specific implementation manners, reference may be made to the description of the related method embodiments, which will not be repeated here.

The storage medium may include a physical device for storing information, and the information is usually digitized and then stored in an electric, magnetic, or optical medium. The storage medium may include: devices that use electrical energy to store information, such as various types of memory, such as RAM, ROM, etc.; devices that use magnetic energy to store information, such as hard disks, floppy disks, magnetic tapes, magnetic core memory, bubble memory, U disk; a device that uses optical means to store information, such as CD or DVD. Of course, there are other ways of readable storage media, such as quantum memory, graphene memory, and so on.

In the data processing device described in the above embodiment, by further splitting the private key, a part of the private key components are encrypted and stored in a more secure security module for storage. In actual application, the method of secure multi-party computing is used again. On the basis that the other private key component does not leave the security module, the private key can be recovered, thereby reducing the risk of the theft of TEE data.

Based on the data processing method, device, and equipment described in the foregoing embodiments, one or more embodiments of this specification also provide a terminal device. The terminal device may include a trusted execution environment and a security module, wherein the A first private key component is stored in the trusted execution environment, a second private key component may be stored in the security module, and the first private key component and the second private key component are received by the trusted execution environment The private key sent by the key generation server is split and obtained;

The trusted execution environment may be used to receive data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generation server and sent to the data providing server;

The trusted execution environment and the security module may be used to use the first private key component and the second private key component to jointly perform secure multi-party calculations to obtain a private key;

The trusted execution environment may also be used to decrypt the data encrypted based on the public key using a private key obtained by secure multi-party calculation.

In the terminal device described in the above embodiment, by further splitting the private key, a part of the private key component is encrypted and stored in a more secure security module for storage. In actual application, the method of secure multi-party computing is used again. The other private key component does not leave the security module to realize the recovery of the private key, thereby reducing the risk of the theft of TEE data.

It should be noted that the device or system described above in this specification may also include other implementation manners based on the description of the related method embodiments. For specific implementation manners, refer to the description of the method embodiments, which will not be repeated here. The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the hardware+program and storage medium+program embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiments.

The embodiments of this specification are not limited to the conditions described in the standard data model/template or the embodiments of this specification, some industry standards or the implementation of the use of custom methods or the implementation described in the embodiments are slightly modified implementation schemes It is also possible to achieve the same, equivalent or similar implementation effects of the foregoing embodiments, or predictable implementation effects after modification. The examples obtained by applying these modified or deformed data acquisition, storage, judgment, processing methods, etc., may still fall within the scope of the optional implementation solutions of this specification.

The systems, devices, modules, or units illustrated in the above embodiments may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a vehicle-mounted human-computer interaction device, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, and a tablet. Computers, wearable devices, or any combination of these devices.

For the convenience of description, when describing the above device, the functions are divided into various modules and described separately. Of course, when implementing one or more of this specification, the function of each module can be realized in the same one or more software and/or hardware, or the module that realizes the same function can be realized by a combination of multiple sub-modules or sub-units, etc. . The device embodiments described above are merely illustrative, for example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components can be combined or integrated To another system, or some features can be ignored, or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, it is entirely possible to program the method steps to make the controller use logic gates, switches, application specific integrated circuits, programmable logic controllers and embedded The same function can be realized in the form of a microcontroller, etc. Therefore, such a controller can be regarded as a hardware component, and the devices included in the controller for realizing various functions can also be regarded as a structure within the hardware component. Or even, the device for realizing various functions can be regarded as both a software module for realizing the method and a structure within a hardware component.

The present invention is described with reference to flowcharts and/or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are generated It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing functions specified in a flow or multiple flows in the flowchart and/or a block or multiple blocks in the block diagram.

In a typical configuration, the computing device includes one or more processors (CPU), input/output interfaces, network interfaces, and memory.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, product or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or include elements inherent to this process, method, commodity, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other same elements in the process, method, or device that includes the element.

Those skilled in the art should understand that one or more embodiments of this specification can be provided as a method, a system, or a computer program product. Therefore, one or more embodiments of this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more embodiments of this specification may adopt a computer program implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The form of the product.

One or more embodiments of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of this specification can also be practiced in distributed computing environments. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the part of the description of the method embodiment. In the description of this specification, descriptions with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" etc. mean specific features described in conjunction with the embodiment or example , Structure, materials or features are included in at least one embodiment or example in this specification. In this specification, the schematic representation of the above-mentioned terms does not necessarily refer to the same embodiment or example. Moreover, the described specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine the different embodiments or examples and the features of the different embodiments or examples described in this specification without contradicting each other.

The above descriptions are only examples of this specification, and are not intended to limit this specification. For those skilled in the art, this specification can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification shall be included in the scope of the claims of this specification.

Claims

A data processing system, characterized in that the system includes a key generation server, a terminal device, and a data providing server, and the terminal device is provided with a trusted execution environment and a security module;

The data providing server is configured to encrypt data based on a public key and send the encrypted data to a terminal device, and the public key is generated in advance by the key generation server and sent to the data providing server;

The trusted execution environment of the terminal device is used to receive encrypted data sent by the data providing server and initiate secure multi-party computing;

The trusted execution environment and the security module are used to jointly perform secure multi-party calculations using the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key. The first private key component and the second private key component are obtained by the trusted execution environment after receiving the private key sent by the key generation server;

The trusted execution environment is used to decrypt the encrypted data by using the private key obtained by secure multi-party calculation.
The system according to claim 1, wherein the key generation server is used to generate a public key and a private key, and send the public key to the data providing server according to a request of the data providing server, And sending the private key to the trusted execution environment of the terminal device according to the request of the terminal device;

Correspondingly, the trusted execution environment of the terminal device is used to split the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in the trusted In the execution environment, the second private key component of the at least two private key components is stored in the security module.
The system according to claim 2, wherein the key generation server is further configured to generate a public key and a private key when receiving a key update request, and the key update request is issued by the terminal device and/or data The providing server sends based on a preset time interval or a data exchange dialogue, and the key update request includes the terminal device ID and the data provider information corresponding to the data providing server;

Correspondingly, the key generation server is further configured to send the public key to the data providing server according to the data provider information, and send the private key to the terminal device according to the terminal device ID. surroundings.
The system according to any one of claims 1-3, wherein the key generation server is further configured to encrypt the private key based on a preset encryption algorithm, and then send it to the trusted execution environment of the terminal device ；

Correspondingly, the trusted execution environment is configured to receive the private key encrypted based on a preset encryption algorithm sent by the key generation server, and perform the encryption based on the preset encryption algorithm based on the decryption algorithm corresponding to the preset encryption algorithm. The private key is decrypted to obtain the private key.
A data processing method applied to a trusted execution environment, characterized in that the method includes:

Receiving data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generating server and sent to the data providing server;

Perform secure multi-party calculation based on the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key, wherein the first private key component and the second private key component After the trusted execution environment receives the private key sent by the key generation server, it is split and obtained;

The private key obtained by secure multi-party calculation is used to decrypt the data encrypted based on the public key.
The method according to claim 5, characterized in that before said receiving the data based on public key encryption sent by the data providing server, the method further comprises:

Send a key update request to the key generation server based on a preset time interval or a data request from the data providing server, so that the key generation server generates a private key and a public key according to the key update request, and the key update request includes Terminal device ID and data providing server information;

Receiving the private key sent by the key generation server, and splitting the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in the In the letter execution environment, the second private key component of the at least two private key components is stored in the security module.
The method according to claim 5 or 6, characterized in that, before the receiving the data based on public key encryption sent by the data providing server, the method further comprises:

Receiving the private key encrypted based on the preset encryption algorithm sent by the key generation server, and decrypting the private key encrypted based on the preset encryption algorithm based on the decryption algorithm corresponding to the preset encryption algorithm to obtain the private key;

Split the private key into at least two private key components, wherein the first private key component of the at least two private key components is stored in a trusted execution environment, and The second private key component is stored in the security module.
A data processing device applied to a trusted execution environment, characterized in that the device includes:

The first data receiving module is configured to receive data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generating server and sent to the data providing server;

The secure multi-party calculation module is used to perform secure multi-party calculation based on the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain a private key, wherein the first private key The component and the second private key component are obtained by splitting the trusted execution environment after receiving the private key sent by the key generation server;

The decryption module is used to decrypt the data encrypted based on the public key by using the private key obtained by secure multi-party calculation.
A data processing device, characterized by comprising a processor and a memory for storing executable instructions of the processor, the instructions being executed by the processor includes the following steps:

Receiving data encrypted based on a public key sent by the data providing server, where the public key is generated in advance by the key generating server and sent to the data providing server;

Perform secure multi-party calculation based on the first private key component stored in the trusted execution environment and the second private key component stored in the security module to obtain the private key, wherein the first private key component and the second private key component After the trusted execution environment receives the private key sent by the key generation server, it is split and obtained;

The private key obtained by secure multi-party calculation is used to decrypt the data encrypted based on the public key.
A terminal device, characterized in that the terminal device includes a trusted execution environment and a security module, wherein a first private key component is stored in the trusted execution environment, and a second private key is stored in the security module Component, the first private key component and the second private key component are obtained by splitting the trusted execution environment after receiving the private key sent by the key generation server;

The trusted execution environment is used to receive data encrypted based on a public key sent by a data providing server, where the public key is pre-generated by the key generation server and sent to the data providing server;

The trusted execution environment and the security module are configured to use the first private key component and the second private key component to jointly perform secure multi-party calculations to obtain a private key;

The trusted execution environment is also used to decrypt the data encrypted based on the public key by using the private key obtained by secure multi-party calculation.