Method and apparatus for determining trust status of TPM, and storage medium

A method for determining a trust status of a trusted platform module (TPM), wherein the method is applied to a verifier, the verifier is any party to determine the trust status of the TPM disposed in a host, and the method comprises:

• sending an unsealing request to the host, wherein the unsealing request carries a seal key handle, wherein
• the seal key handle is sent by the host to the verifier after the host seals platform configuration register PCR values in the TPM based on a first verification key when the host is in an initialization state, and the first verification key is obtained after the host encrypts, based on a local key of the host, a second verification key transmitted on an encrypted channel between the verifier and the host;
• receiving verification information sent by the host, wherein the verification information is determined, after the host unseals current PCR values in the TPM based on the seal key handle, by the host based on an unseal verification key obtained after the unsealing;
• and
• determining the trust status of the TPM based on the verification information.

An apparatus for determining a trust status of a trusted platform module (TPM), wherein the apparatus is a host, the TPM is disposed in the host, and the apparatus comprises:

• one or more processors;
• and
• non-transitory computer-readable memory storing a program to be executed by the one or more processors, the program including instructions to:
• a processor configured to execute computer program modules comprising:
• a receiving module, configured to receive an unsealing request sent by a verifier, wherein the unsealing request carries a seal key handle, wherein
• the seal key handle is sent by the host to the verifier after the host seals platform configuration register (PCR) values in the TPM based on a first verification key when the host is in an initialization state, the first verification key is obtained after a second verification key transmitted on an encrypted channel between the verifier and the host is encrypted based on a local key of the host, and the verifier is any party that needs to determine the trust status of the TPM;
• unseal current PCR values in the TPM based on the seal key handle, to obtain an unseal verification key;
• and
• determine verification information based on the unseal verification key, and send the verification information to the verifier, to instruct the verifier to determine the trust status of the TPM based on the verification information.