# US 11,121,865 B2 · Method and apparatus for establishing trusted channel between user and trusted computing cluster

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,121,865 B2
- Document ID: US11121865B2
- Status: Granted
- Kind: B2
- Application number: 17/158,987
- Filed: 2021-01-26
- Published: 2021-06-17
- Granted: 2021-09-14
- Earliest claimed: 2018-12-12
- Assignees: Advanced New Technologies Co., Ltd.
- Applicants: Advanced New Technologies Co., Ltd.
- Inventors: Aihui Zhou; Qunshan Huang; Chaofan Yu; Weiwen Cai; Lei Wang
- Web page: https://patentgrep.com/patent/US11121865B2

## CPC

- H04L 9/083: {involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/0822: {using key encryption key}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/3215: {using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18)}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/065: {for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833)}
- H04L 2463/062: applying encryption of the keys
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Some embodiments of the present specification provide a method and an apparatus for establishing a trusted channel between a user and a trusted computing cluster. According to the method, when a user wants to establish a trusted channel with a trusted computing cluster, the user only negotiates a session key with any first trusted computing unit in the cluster to establish the trusted channel. Then, the first trusted computing unit encrypts the session key using a cluster key common to the trusted computing cluster to which the first trusted computing unit belongs, and sends the encrypted session key to a cluster manager. The cluster manager transmits the encrypted session key in the trusted computing cluster, so that other trusted computing units in the cluster obtain the session key and join the trusted channel. Thus, the user establishes a trusted channel with the entire trusted computing cluster.

## Claims

### Claim 1

A method for establishing a trusted channel between a user and a trusted computing cluster, the trusted computing cluster including a plurality of trusted computing units each maintaining a first cluster key, the method comprising:
at a first trusted computing unit of the trusted computing cluster:
obtaining a first session key through negotiation with a user, and establishing a first trusted channel with the user, the first session key configured to encrypt data to be transmitted through the first trusted channel;
encrypting the first session key using the first cluster key to obtain a first encrypted key; and
sending a first notification to a cluster manager, the first notification including the first encrypted key for the cluster manager to transfer the first encrypted key to a second trusted computing unit in the trusted computing cluster.

### Claim 2 (depends on 1)

The method according to claim 1, wherein the obtaining the first session key through negotiation with the user includes:
sending a first public key of a first key pair of the first trusted computing unit to the user, the first key pair including the first public key and a first private key, and obtaining a user public key provided by the user; and
generating the first session key based on the first public key, the first private key, and the user public key.

### Claim 3 (depends on 1)

The method according to claim 1, further comprising:
before the sending the first notification to the cluster manager:
sending an identifier request message for the first trusted channel to the cluster manager;
obtaining a first session identifier allocated by the cluster manager to the first trusted channel; and
including the first session identifier into the first notification.

### Claim 4 (depends on 1)

The method of claim 1, comprising:
at the cluster manager:
receiving the first notification from the first trusted computing unit;
determining the trusted computing cluster to which the first trusted computing unit belongs; and
transferring the first encrypted key to the second trusted computing unit in the trusted computing cluster for the second trusted computing unit to decrypt the first encrypted key based on the first cluster key maintained by the second trusted computing unit to obtain the first session key, and to join the first trusted channel based on the first session key.

### Claim 5 (depends on 4)

The method according to claim 4, further comprising:
allocating a first session identifier to the first trusted channel in response to an identifier request message of the first trusted computing unit for the first trusted channel; and
adding the first trusted computing unit to a first trusted computing unit list corresponding to the first session identifier.

### Claim 6 (depends on 5)

The method according to claim 5, wherein the first notification further includes the first session identifier, and the method further comprises:
transferring the first session identifier to the second trusted computing unit; and
adding the second trusted computing unit to the first trusted computing unit list.

### Claim 7 (depends on 4)

The method according to claim 4, wherein the determining the trusted computing cluster to which the first trusted computing unit belongs includes:
using a maintained cluster information table to determine a first trusted computing cluster to which the first trusted computing unit belongs, and each trusted computing unit included in the first trusted computing cluster.

### Claim 8

A method for re-establishing a trusted channel between a user and a trusted computing cluster, the trusted computing cluster having established a first trusted channel with the user, the first trusted channel having a first session key to encrypt transmitted data, the trusted computing cluster including a plurality of trusted computing units each maintaining a first cluster key, a first session identifier corresponding to the first trusted channel, the method comprising:
at a first trusted computing unit of the plurality of trusted computing units:
obtaining, through negotiation with the user, a second session key for the first trusted channel, the second session key configured to replace the first session key of the first trusted channel to encrypt transmitted data;
encrypting the second session key using the first cluster key to obtain a second encrypted key; and
sending a notification to a cluster manager, the notification including the second encrypted key and the first session identifier for the cluster manager to transfer the second encrypted key to a second trusted computing unit related to the first session identifier.

### Claim 9 (depends on 8)

The method of claim 8, comprising:
at the cluster manager:
receiving the notification from the first trusted computing unit;
obtaining, based on the first session identifier, a first trusted computing unit list of trusted computing units that join the first trusted channel, the first trusted computing unit list including the first trusted computing unit and at least one other trusted computing unit belonging to the trusted computing cluster;
removing each of the at least one other trusted computing unit from the first trusted computing unit list; and
transferring the second encrypted key to the second trusted computing unit of the at least one other trusted computing unit for the second trusted computing unit to decrypt the second encrypted key based on the first cluster key maintained by the second trusted computing unit to obtain the second session key, and to rejoin the first trusted channel based on the second session key.

### Claim 10 (depends on 9)

The method according to claim 9, further comprising:
after the transferring the second encrypted key to the second trusted computing unit:
adding the second trusted computing unit to the second trusted computing unit list.

### Claim 11

A non-transitory computer-readable storage medium, the non-transitory computer-readable storage medium storing computer executable instructions, which when executed by one or more processors, configure the one or more processors to perform acts including:
at a first trusted computing unit of a trusted computing cluster, the trusted computing cluster including a plurality of trusted computing units each maintaining a first cluster key:
obtaining a first session key through negotiation with a user, and establishing a first trusted channel with the user, the first session key configured to encrypt data to be transmitted through the first trusted channel;
encrypting the first session key using the first cluster key to obtain a first encrypted key; and
sending a first notification to a cluster manager, the first notification including the first encrypted key for the cluster manager to transfer the first encrypted key to a second trusted computing unit in the trusted computing cluster.

### Claim 12 (depends on 11)

The non-transitory computer-readable storage medium according to claim 11, wherein the obtaining the first session key through negotiation with the user includes:
sending a first public key of a first key pair of the first trusted computing unit to the user, the first key pair including the first public key and a first private key, and obtaining a user public key provided by the user; and
generating the first session key based on the first public key, the first private key, and the user public key.

### Claim 13 (depends on 11)

The non-transitory computer-readable storage medium according to claim 11, wherein the acts further include:
before the sending the first notification to the cluster manager:
sending an identifier request message for the first trusted channel to the cluster manager;
obtaining a first session identifier allocated by the cluster manager to the first trusted channel; and
including the first session identifier into the first notification.

### Claim 14 (depends on 11)

The non-transitory computer-readable storage medium of claim 11, wherein the acts include:
at the cluster manager:
receiving the first notification from the first trusted computing unit;
determining the trusted computing cluster to which the first trusted computing unit belongs; and
transferring the first encrypted key to the second trusted computing unit in the trusted computing cluster for the second trusted computing unit to decrypt the first encrypted key based on the first cluster key maintained by the second trusted computing unit to obtain the first session key, and to join the first trusted channel based on the first session key.

### Claim 15 (depends on 14)

The non-transitory computer-readable storage medium according to claim 14, wherein the acts include:
allocating a first session identifier to the first trusted channel in response to an identifier request message of the first trusted computing unit for the first trusted channel; and
adding the first trusted computing unit to a first trusted computing unit list corresponding to the first session identifier.

### Claim 16 (depends on 15)

The non-transitory computer-readable storage medium according to claim 15, wherein the first notification further includes the first session identifier, and the acts include:
transferring the first session identifier to the second trusted computing unit; and
adding the second trusted computing unit to the first trusted computing unit list.

### Claim 17 (depends on 14)

The non-transitory computer-readable storage medium according to claim 14, wherein the determining the trusted computing cluster to which the first trusted computing unit belongs includes:
using a maintained cluster information table to determine a first trusted computing cluster to which the first trusted computing unit belongs, and each trusted computing unit included in the first trusted computing cluster.

### Claim 18

A non-transitory computer-readable storage medium, the non-transitory computer-readable storage medium storing computer executable instructions, which when executed by one or more processors, configure the one or more processors to perform acts including:
at a first trusted computing unit of a trusted computing cluster, the trusted computing cluster including a plurality of trusted computing units each maintaining a first cluster key, the trusted computing cluster having established a first trusted channel with a user, the first trusted channel having a first session key to encrypt transmitted data, a first session identifier corresponding to the first trusted channel:
obtaining, through negotiation with the user, a second session key for the first trusted channel, the second session key configured to replace the first session key of the first trusted channel to encrypt transmitted data;
encrypting the second session key using the first cluster key to obtain a second encrypted key; and
sending a notification to a cluster manager, the notification including the second encrypted key and the first session identifier for the cluster manager to transfer the second encrypted key to a second trusted computing unit related to the first session identifier.

### Claim 19 (depends on 18)

The non-transitory computer-readable storage medium of claim 18, wherein the acts include:
at the cluster manager:
receiving the notification from the first trusted computing unit;
obtaining, based on the first session identifier, a first trusted computing unit list of trusted computing units that join the first trusted channel, the first trusted computing unit list including the first trusted computing unit and at least one other trusted computing unit belonging to the trusted computing cluster;
removing each of the at least one other trusted computing unit from the first trusted computing unit list; and
transferring the second encrypted key to the second trusted computing unit of the at least one other trusted computing unit for the second trusted computing unit to decrypt the second encrypted key based on the first cluster key maintained by the second trusted computing unit to obtain the second session key, and to rejoin the first trusted channel based on the second session key.

### Claim 20 (depends on 19)

The non-transitory computer-readable storage medium according to claim 19, wherein the acts include:
after the transferring the second encrypted key to the second trusted computing unit:
adding the second trusted computing unit to the second trusted computing unit list.