Method, apparatus, device and storage medium for data processing

A data processing method based on a trusted execution environment, comprising:

• receiving, at a client device and from a trusted execution environment component of a host device, a first metric value for describing a target virtual machine hosted on the host device, wherein the first metric value is determined based on a first parameter set via the trusted execution environment component of the host device;
• determining, based on a second parameter set, a second metric value for describing a virtual machine expected by the client device;
• and
• in response to the second metric value being consistent with the first metric value, sending, to the trusted execution environment component of the host device, a decryption key for decrypting a first virtual image file of the target virtual machine,
• wherein the first parameter set corresponds to the second parameter set.

An electronic device, comprising:

• at least one processor;
• and
• at least one memory coupled to the at least one processor and storing instructions for execution by the at least one processor, the instructions, when executed by the at least one processor, causing the electronic device to perform acts comprising:
• determining, via a trusted execution environment component of a host device and based on a first parameter set, a first metric value for describing a target virtual machine hosted on the host device;
• sending the first metric value to a client device via the trusted execution environment component of the host device;
• receiving, from the client device via the trusted execution environment component, a decryption key for decrypting a first virtual image file of the target virtual machine;
• and
• running, based on the decryption key, the first virtual image file to start the target virtual machine,
• wherein the decryption key is sent by the client device to the trusted execution environment component of the host device in response to a second metric value being consistent with the first metric value,
• wherein the client device determines, based on a second parameter set, the second metric value for describing a virtual machine expected by the client device,
• wherein the first parameter set corresponds to the second parameter set.