Method for remotely monitoring host based on chip-level privacy-preserving computation (PPC)

A remote host monitoring method based on chip-level privacy-preserving computation (PPC), comprising the following steps:

• S1:
• allowing monitoring software in a user-side host to start in a chip-level trusted execution environment (TEE);
• S2:
• determining whether the user-side host locally stores valid private data, directly going to step S4 if yes, or otherwise, going to step S3;
• wherein the determining comprises that if the user-side host locally does not establish a connection with a supervisor and no locally-stored private data of the supervisor needs to be captured, or the user-side host locally has established a connection with the supervisor, but the private data of the supervisor needs to be updated and the connection needs to be established to recapture the private data, and then the user-side host locally stores noin valid private data;
• otherwise, the user-side host locally stores valid private data;
• S3:
• establishing a secure connection with the supervisor and capturing private data;
• and
• S4:
• allowing monitoring software running in the TEE to execute a related monitoring instruction based on the private data, encrypting and signing a monitoring result, and transmitting the monitoring result to the supervisor;
• wherein step S3 comprises:
• allowing, upon receiving the private data, chip hardware to locally store the private data with a trusted storage technology based on a corresponding monitoring software, wherein a key is generated in a TEE of the chip hardware, the private data is encrypted and stored with the key, and in the TEE, the key is associated with a hash value of memory data for loading the corresponding monitoring software;
• and when the monitoring software requests to read the private data, the TEE verifies the hash value of the memory data for loading the monitoring software, and verifies that when the hash value is a hash value associated with the key, the corresponding key is used to decrypt and read the private data;
• wherein the private data comprises an encryption key K of the supervisor, a signature key (private key) S of the supervisor, monitoring time t, dt, and a monitoring action m;
• and
• wherein, in step S4, the monitoring result is encrypted and signed in a following way:
• encrypting the monitoring result with the encryption key K of the supervisor, signing the monitoring result with the signature key (private key) S of the supervisor, and writing both encrypted information and a signature value to a file f_i.