Methods for constructing trusted grid, trusted grids, and application interaction methods thereon

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform one or more operations comprising:

• respectively loading, by a plurality of computing nodes, uniform target code in trusted execution environments (TEEs) of the plurality of computing nodes;
• storing a target metric value corresponding to the uniform target code, to form a plurality of trusted nodes, wherein target logic corresponding to the uniform target code comprises trusted proxy logic configured to provide a security related service for an upper-layer application;
• performing, by each trusted node of the plurality of trusted nodes, mutual verification with another trusted node of the plurality of trusted nodes based on the target metric value, wherein the mutual verification comprises remote attestation between the each trusted node by comparing the target metric value stored in the each trusted node;
• and
• establishing a secure connection to the another trusted node after the mutual verification is passed, wherein the plurality of trusted nodes that establish secure connections to each other form a trusted grid.

A computer-implemented system comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• respectively loading, by a plurality of computing nodes, uniform target code in trusted execution environments (TEEs) of the plurality of computing nodes;
• storing a target metric value corresponding to the uniform target code, to form a plurality of trusted nodes, wherein target logic corresponding to the uniform target code comprises trusted proxy logic configured to provide a security related service for an upper-layer application;
• performing, by each trusted node of the plurality of trusted nodes, mutual verification with another trusted node of the plurality of trusted nodes based on the target metric value, wherein the mutual verification comprises remote attestation between the each trusted node by comparing the target metric value stored in the each trusted node;
• and
• establishing a secure connection to the another trusted node after the mutual verification is passed, wherein the plurality of trusted nodes that establish secure connections to each other form a trusted grid.